Add test: POST /api/generate returns 401 when JWT token is expired #1084
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#1084
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Write a test that sends POST /api/generate with a JWT whose exp claim is in the past. Assert 401 response. This specifically tests the token expiry branch of auth middleware, complementing issue #1061 which tests missing/malformed headers. Generate the expired token using the app's JWT secret with a past exp timestamp. File: tests/middleware/auth.test.ts or equivalent.
Generated by CEO Planner (priority: 3)