fix(backend): repair backend CI — auth mocks targeted the wrong module

backend/tests/integration/streams.test.ts

@@ -11,16 +11,16 @@ import request from 'supertest';
 // Bypass Stellar signature verification on POST /v1/streams. The route is
 // exercised here as a stand-in for the indexer worker, so we replace the auth
 // middleware with a stub that injects a deterministic wallet.
-vi.mock('../../src/middleware/auth.middleware.js', () => ({
-  authMiddleware: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
-    next();
-  },
-  optionalAuthMiddleware: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
-    next();
-  },
-}));
+vi.mock('../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
+      next();
+    },
+  };
+});
 
 // ─── Mocks (using vi.hoisted to ensure they are available to vi.mock) ─────────
 

backend/tests/integration/streams/cancel.test.ts

@@ -38,12 +38,16 @@ vi.mock('../../../src/lib/prisma.js', () => {
 });
 
 // Mock auth middleware to bypass real Stellar signature verification
-vi.mock('../../../src/middleware/auth.middleware.js', () => ({
-  authMiddleware: (req: any, res: any, next: any) => {
-    req.user = { publicKey: 'G_SENDER_123' };
-    next();
-  },
-}));
+vi.mock('../../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: 'G_SENDER_123' };
+      next();
+    },
+  };
+});
 
 // ─── App import (after mocks) ───────────────────────────────────────────────
 

backend/tests/integration/streams/withdraw.test.ts

@@ -32,12 +32,16 @@ vi.mock('../../../src/services/sorobanService.js', () => ({
   isStale: vi.fn().mockReturnValue(false),
 }));
 
-vi.mock('../../../src/middleware/auth.middleware.js', () => ({
-  authMiddleware: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: currentUser.publicKey };
-    next();
-  },
-}));
+vi.mock('../../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: currentUser.publicKey };
+      next();
+    },
+  };
+});
 
 import app from '../../../src/app.js';
 

backend/tests/integration/top-up.test.ts

@@ -58,12 +58,16 @@ vi.mock('../../src/services/sorobanService.js', () => ({
   cancelStream: vi.fn(),
 }));
 
-vi.mock('../../src/middleware/auth.middleware.js', () => ({
-  authMiddleware: vi.fn((req: any, _res: any, next: any) => {
-    req.user = { publicKey: req.headers['x-test-caller'] ?? SENDER };
-    next();
-  }),
-}));
+vi.mock('../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: vi.fn((req: any, _res: any, next: any) => {
+      req.user = { publicKey: req.headers['x-test-caller'] ?? SENDER };
+      next();
+    }),
+  };
+});
 
 // App import after mocks
 import app from '../../src/app.js';

backend/tests/stream.test.ts

@@ -1,13 +1,16 @@
 import { describe, it, expect, vi, beforeEach } from 'vitest';
 import request from 'supertest';
 
-vi.mock('../src/middleware/auth.middleware.js', () => ({
-  authMiddleware: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
-    next();
-  },
-  optionalAuthMiddleware: (_req: any, _res: any, next: any) => next(),
-}));
+vi.mock('../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
+      next();
+    },
+  };
+});
 
 vi.mock('../src/middleware/stream-rate-limiter.middleware.js', () => ({
   streamCreationRateLimiter: (_req: any, _res: any, next: any) => next(),