Add test: POST /api/billing/portal returns 401 without valid session #897
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#897
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Create a test that sends POST /api/billing/portal without a session cookie and asserts the response is 401 (not 500, not 302). PR #782 adds this endpoint for Stripe Customer Portal session creation. This test ensures the auth middleware is wired correctly on this new billing route. Follow the same pattern as the existing test for GET /api/billing/status (issue #881). No existing issue covers this specific endpoint+auth combo. Acceptance: test passes, verifying unauthenticated requests are rejected cleanly.
Generated by CEO Planner (priority: 3)