Write unit tests for auth middleware and challenge/verify flow

[ogazboiz]

Join our community: https://t.me/+DOylgFv1jyJlNzM0

Description

The auth middleware and challenge/verify endpoints were added but have no tests. Authentication bugs could silently expose all stream data or lock out legitimate users.

Test Cases Needed

• test_challenge_returns_nonce_for_valid_address
• test_verify_valid_signature_returns_jwt
• test_verify_expired_nonce_returns_401
• test_verify_invalid_signature_returns_401
• test_auth_middleware_accepts_valid_jwt
• test_auth_middleware_rejects_expired_jwt
• test_auth_middleware_rejects_missing_token
• test_sse_endpoint_requires_auth

Files

• backend/src/__tests__/auth.test.ts (create)

Acceptance Criteria

• All 8 tests pass
• Mock signature verification (no real Stellar RPC)
• Runs in CI

[Skinny001]

@Skinny001 has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

i would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Skinny001 to this issue.

[Turawa2]

@Turawa2 has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

I can handle this task with precision and deliver exactly what’s required. I have the skills, focus, and attention to detail needed to complete it efficiently and to a high standard. You can rely on me to get it done right.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Turawa2 to this issue.

[akintewe]

@akintewe has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

I've been creating intricate forms and e-commerce systems for more than four years as a full-stack developer. I have designed inventory management systems for agricultural enterprises and have experience with image processing and large-scale state management. I have also worked on this project in the past.
My ETA is one hour, and I would love to work on this problem.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @akintewe to this issue.

[TEEZY234]

@TEEZY234 has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

I’d like to work on this issue.

I have experience writing backend authentication and security tests and will implement a complete unit test suite for the auth middleware and challenge/verify flow in backend/src/tests/auth.test.ts. I will mock signature verification to avoid external Stellar RPC calls and keep the tests fast and deterministic.

I will cover all required scenarios including nonce generation, valid and invalid signature verification, expired nonce handling, JWT issuance and validation, middleware protection, and SSE endpoint authentication requirements. Each test will assert correct security behavior and prevent unauthorized access.

The final result will be a CI-ready test suite that ensures the authentication flow is reliable, secure, and regression-resistant.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @TEEZY234 to this issue.

[drips-wave]

Congratulations, @akintewe! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on April 29, 2026.

🧑‍💻 @akintewe: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊