Fix local adult metadata and watch history removal

internal/middleware/emby_auth_test.go

@@ -0,0 +1,67 @@
+package middleware
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v5"
+)
+
+func TestEmbyAuthRequiredAcceptsEmbyClientTokenFormats(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	const secret = "test-secret"
+	token := signedTestToken(t, secret)
+
+	tests := []struct {
+		name      string
+		headerKey string
+		headerVal string
+		query     string
+	}{
+		{name: "x emby token", headerKey: "X-Emby-Token", headerVal: token},
+		{name: "x mediabrowser token", headerKey: "X-MediaBrowser-Token", headerVal: token},
+		{name: "authorization mediabrowser token", headerKey: "Authorization", headerVal: `MediaBrowser Client="Infuse", Token="` + token + `"`},
+		{name: "x emby authorization", headerKey: "X-Emby-Authorization", headerVal: `MediaBrowser Client="VidHub", Token="` + token + `"`},
+		{name: "query api key", query: "?api_key=" + token},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			router := gin.New()
+			router.GET("/Users/Me", EmbyAuthRequired(secret), func(c *gin.Context) {
+				c.String(http.StatusOK, GetUserID(c))
+			})
+			req := httptest.NewRequest(http.MethodGet, "/Users/Me"+tt.query, nil)
+			if tt.headerKey != "" {
+				req.Header.Set(tt.headerKey, tt.headerVal)
+			}
+			w := httptest.NewRecorder()
+			router.ServeHTTP(w, req)
+			if w.Code != http.StatusOK {
+				t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
+			}
+			if got := w.Body.String(); got != "user-1" {
+				t.Fatalf("expected user id, got %q", got)
+			}
+		})
+	}
+}
+
+func signedTestToken(t *testing.T, secret string) string {
+	t.Helper()
+	raw := jwt.NewWithClaims(jwt.SigningMethodHS256, &Claims{
+		UserID: "user-1",
+		Role:   "admin",
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(time.Hour)),
+		},
+	})
+	token, err := raw.SignedString([]byte(secret))
+	if err != nil {
+		t.Fatalf("failed to sign token: %v", err)
+	}
+	return token
+}