fix(confidence-engine): keep health endpoint public

2026-09-09 10:01:10 +01:00
parent 896851e68d
commit f557175bfb
2 changed files with 9 additions and 1 deletions
@@ -69,6 +69,14 @@ describe("authenticated product boundary", () => {
    expect(mockGetAuthenticatedUser).not.toHaveBeenCalled();
  });

+  it("does not convert /api/health to 401 via middleware when unauthenticated", async () => {
+    mockGetUser.mockResolvedValue({ data: { user: null } });
+    const { middleware } = await import("@/middleware.js");
+    const response = await middleware(new NextRequest("http://localhost:3000/api/health"));
+
+    expect(response.status).toBe(200);
+  });
+
  it("redirects unauthenticated product access to the login surface", async () => {
    mockGetUser.mockResolvedValue({ data: { user: null } });
    const { middleware } = await import("@/middleware.js");