Add initial project files

apps/backend/tests/utils/auth.ts

@@ -0,0 +1,62 @@
+import type { ApiClient } from '@japa/api-client'
+import db from '@adonisjs/lucid/services/db'
+import Admins from '#base_modules/Admin/model/admin'
+import Role from '#base_modules/Role/model/role'
+
+let sequence = 0
+
+/**
+ * Creates an active admin holding exactly the given permission slugs (via a
+ * dedicated role) and returns a Bearer token for the access-tokens guard.
+ *
+ * DB-backed: call from specs that run inside a migrated test database (see
+ * `tests/bootstrap.ts`), typically with a global-transaction group hook.
+ * Pass an empty array for an admin with no permissions at all.
+ */
+export async function createAdminWithToken(permissions: string[]) {
+  sequence += 1
+  const suffix = `${Date.now()}-${sequence}`
+
+  const admin = await Admins.create({
+    email: `spec-admin-${suffix}@test.local`,
+    password: 'secret-password',
+    status: 'active',
+  })
+
+  if (permissions.length > 0) {
+    const role = await Role.create({ name: `spec-role-${suffix}` })
+    await db.table('admin_roles').insert({ admin_id: admin.id, role_id: role.id })
+    await db
+      .table('role_permissions')
+      .multiInsert(permissions.map((slug) => ({ role_id: role.id, permission_slug: slug })))
+  }
+
+  const accessToken = await Admins.accessTokens.create(admin)
+
+  return { admin, token: accessToken.value!.release() }
+}
+
+/**
+ * Logs in as Admin using the test HTTP client.
+ * Returns a Bearer token string.
+ */
+export async function loginAsAdmin(client: ApiClient): Promise<string> {
+  const email = process.env.ADMIN_EMAIL || 'admin@admin.com'
+  const password = process.env.ADMIN_PASSWORD || '1234qqqq'
+
+  const res = await client.post('/auth/login').json({ email, password })
+
+  res.assertStatus(200)
+
+  const body = res.body()
+
+  // returns: { type, token, user }
+  const token = body?.token?.release?.() || body?.token || body?.access_token
+
+  if (!token) {
+    console.error('Login response body:', body)
+    throw new Error('Could not acquire admin token from /auth/login response')
+  }
+
+  return token
+}