swap to nextest

backend/src/router.rs

@@ -12,7 +12,7 @@ use http::StatusCode;
 use tower::ServiceBuilder;
 use tower_http::timeout::TimeoutLayer;
 use tower_http::trace::TraceLayer;
-use tracing::Level;
+use tracing::{Level, warn};
 use uuid::Uuid;
 
 pub fn app() -> (Router, mpsc::Receiver<bool>) {
@@ -42,15 +42,22 @@ pub fn app() -> (Router, mpsc::Receiver<bool>) {
 }
 
 fn admin(tx: mpsc::Sender<bool>) -> Router {
-    let r = Router::new().route("/test", get(async || StatusCode::OK));
+    let r = Router::new().route("/", get(async || StatusCode::OK));
 
     let r = add_shutdown_endpoint(r, tx);
     r.layer(from_fn(async |req: Request, next: Next| {
         if let Ok(secret) = std::env::var("ADMIN_SECRET") {
-            println!("ADMIN_SECRET: {secret}");
             match req.headers().get("Authorization") {
                 Some(key) if secret == *key => (),
+                Some(key) => {
+                    warn!("Unauthorized request with key: {key:?}");
+                    return Response::builder()
+                        .status(StatusCode::UNAUTHORIZED)
+                        .body(Body::empty())
+                        .unwrap();
+                }
                 _ => {
+                    warn!("Unauthorized request no key given");
                     return Response::builder()
                         .status(StatusCode::UNAUTHORIZED)
                         .body(Body::empty())
@@ -82,3 +89,26 @@ fn add_shutdown_endpoint(r: Router, tx: mpsc::Sender<bool>) -> Router {
 fn add_shutdown_endpoint(r: Router, _: mpsc::Sender<bool>) -> Router {
     r
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use tower::{self, ServiceExt};
+
+    #[tokio::test]
+    async fn test_authorization_disables_when_no_env_var_set() {
+        let (app, _) = app();
+
+        let resp = app
+            .oneshot(
+                axum::http::Request::builder()
+                    .uri("/admin")
+                    .body(Body::empty())
+                    .unwrap(),
+            )
+            .await
+            .unwrap();
+
+        assert_eq!(resp.status(), StatusCode::OK);
+    }
+}