src/app/api/auth-status/route.test.ts

import { GET } from './route';
import assert from 'node:assert/strict';
import { afterEach, describe, it } from 'node:test';

const originalAppPassword = process.env.APP_PASSWORD;

afterEach(() => {
    if (originalAppPassword === undefined) {
        delete process.env.APP_PASSWORD;
    } else {
        process.env.APP_PASSWORD = originalAppPassword;
    }
});

describe('GET /api/auth-status', () => {
    it('treats blank APP_PASSWORD as disabled', async () => {
        process.env.APP_PASSWORD = '   ';

        const response = await GET();
        const body = (await response.json()) as { passwordRequired?: boolean };

        assert.equal(body.passwordRequired, false);
    });
});