TASKS-1823 WebManager module

apps/backend/tests/utils/auth.ts

@@ -1,4 +1,40 @@
 import type { ApiClient } from '@japa/api-client'
+import db from '@adonisjs/lucid/services/db'
+import Admins from '#base_modules/Admin/model/admin'
+import Role from '#base_modules/Role/model/role'
+
+let sequence = 0
+
+/**
+ * Creates an active admin holding exactly the given permission slugs (via a
+ * dedicated role) and returns a Bearer token for the access-tokens guard.
+ *
+ * DB-backed: call from specs that run inside a migrated test database (see
+ * `tests/bootstrap.ts`), typically with a global-transaction group hook.
+ * Pass an empty array for an admin with no permissions at all.
+ */
+export async function createAdminWithToken(permissions: string[]) {
+  sequence += 1
+  const suffix = `${Date.now()}-${sequence}`
+
+  const admin = await Admins.create({
+    email: `spec-admin-${suffix}@test.local`,
+    password: 'secret-password',
+    status: 'active',
+  })
+
+  if (permissions.length > 0) {
+    const role = await Role.create({ name: `spec-role-${suffix}` })
+    await db.table('admin_roles').insert({ admin_id: admin.id, role_id: role.id })
+    await db
+      .table('role_permissions')
+      .multiInsert(permissions.map((slug) => ({ role_id: role.id, permission_slug: slug })))
+  }
+
+  const accessToken = await Admins.accessTokens.create(admin)
+
+  return { admin, token: accessToken.value!.release() }
+}
 
 /**
  * Logs in as Admin using the test HTTP client.