Дочинили авторизацию

codebase/backend/tests/test_config.py

@@ -90,6 +90,7 @@ class InfrastructureConfigTests(unittest.TestCase):
         self.assertNotIn("proxy_read_timeout", proxy_common)
         self.assertNotIn("proxy_send_timeout", proxy_common)
         self.assertIn("include /etc/nginx/snippets/proxy-keycloak.conf;", site)
+        self.assertIn("location = /auth/callback", site)
         self.assertIn("location ^~ /auth/resources/", site)
         self.assertIn("protocol/openid-connect/3p-cookies/", site)
         self.assertNotIn("security-headers.conf", proxy_keycloak)
@@ -151,9 +152,17 @@ class InfrastructureConfigTests(unittest.TestCase):
 
     def test_expo_public_environment_uses_static_property_access(self) -> None:
         config = (ROOT / "frontend-test-site/src/config.ts").read_text(encoding="utf-8")
+        auth = (ROOT / "frontend-test-site/src/auth.ts").read_text(encoding="utf-8")
+        callback = (ROOT / "frontend-test-site/app/auth/callback.tsx").read_text(
+            encoding="utf-8"
+        )
         self.assertNotIn("process.env[name]", config)
         self.assertIn("process.env.EXPO_PUBLIC_API_BASE_URL", config)
         self.assertIn("process.env.EXPO_PUBLIC_AUTH_BASE_URL", config)
+        self.assertIn('path: "auth/callback"', auth)
+        self.assertIn('window.location.assign(url)', auth)
+        self.assertIn("completionStarted.current", callback)
+        self.assertTrue((ROOT / "frontend-test-site/app/auth/callback.tsx").is_file())
 
     def test_alembic_escapes_percent_encoded_dsn_options(self) -> None:
         for relative_path in (
@@ -165,6 +174,19 @@ class InfrastructureConfigTests(unittest.TestCase):
             self.assertIn('.replace("%", "%%")', env_script, relative_path)
             self.assertIn("create_postgres_engine", env_script, relative_path)
 
+    def test_contact_sync_qualifies_pgcrypto_digest(self) -> None:
+        initial = (
+            ROOT / "api-backend/alembic/versions/0001_initial_han_app.py"
+        ).read_text(encoding="utf-8")
+        fix = (
+            ROOT / "api-backend/alembic/versions/0002_qualify_pgcrypto_digest.py"
+        ).read_text(encoding="utf-8")
+        main = (ROOT / "api-backend/app/main.py").read_text(encoding="utf-8")
+        self.assertIn("public.digest(", initial)
+        self.assertIn("public.digest(", fix)
+        self.assertIn('down_revision: str | None = "0001_initial"', fix)
+        self.assertIn('revision != "0002_pgcrypto_digest"', main)
+
     def test_keycloak_management_health_and_bridge_environment(self) -> None:
         standalone = (ROOT / "keycloak/docker-compose.yml").read_text(encoding="utf-8")
         self.assertIn("GET /auth/health/ready", standalone)