forked from 0xWheatyz/SPARC
ae9f257dcb
Add 17 tests in tests/test_auth.py covering all auth flows: - Registration: first user admin, subsequent user, duplicate email - Login: valid credentials, invalid credentials - Protected routes: valid token, missing token, expired token, wrong token type - Token refresh: valid refresh, invalid refresh, access-as-refresh rejected - Admin endpoints: list users, change role, own-role prevention, permission checks All tests use mocked database (no live DB required). Closes leeworks-agents/SPARC#10 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>