From 56b45945666168b47067bba673d281f8ca7e1ae8 Mon Sep 17 00:00:00 2001
From: adcondev <38170282+adcondev@users.noreply.github.com>
Date: Mon, 1 Jun 2026 00:15:29 +0000
Subject: [PATCH 1/2] =?UTF-8?q?=F0=9F=A7=AA=20Add=20tests=20for=20Validate?=
 =?UTF-8?q?Password=20in=20Auth=20Manager?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
---
 internal/auth/auth_test.go | 79 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 79 insertions(+)
 create mode 100644 internal/auth/auth_test.go

diff --git a/internal/auth/auth_test.go b/internal/auth/auth_test.go
new file mode 100644
index 0000000..3ddaa73
--- /dev/null
+++ b/internal/auth/auth_test.go
@@ -0,0 +1,79 @@
+package auth
+
+import (
+	"context"
+	"encoding/base64"
+	"testing"
+
+	"github.com/adcondev/ticket-daemon/internal/config"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func TestValidatePassword(t *testing.T) {
+	// Save the original config state to restore it after the test
+	originalPasswordHashB64 := config.PasswordHashB64
+	defer func() {
+		config.PasswordHashB64 = originalPasswordHashB64
+	}()
+
+	// Helper to create a valid base64 bcrypt hash
+	validPassword := "mysecurepassword"
+	hash, err := bcrypt.GenerateFromPassword([]byte(validPassword), bcrypt.MinCost)
+	if err != nil {
+		t.Fatalf("Failed to generate bcrypt hash: %v", err)
+	}
+	validHashB64 := base64.StdEncoding.EncodeToString(hash)
+
+	// Context for manager
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+	manager := NewManager(ctx)
+
+	tests := []struct {
+		name          string
+		configHashB64 string
+		inputPassword string
+		expected      bool
+	}{
+		{
+			name:          "Auth Disabled (Empty Hash)",
+			configHashB64: "",
+			inputPassword: "anypassword",
+			expected:      true,
+		},
+		{
+			name:          "Invalid Base64 Config Hash",
+			configHashB64: "invalid_base64!",
+			inputPassword: validPassword,
+			expected:      false,
+		},
+		{
+			name:          "Valid Base64 but Invalid Bcrypt Hash",
+			configHashB64: base64.StdEncoding.EncodeToString([]byte("not_a_bcrypt_hash")),
+			inputPassword: validPassword,
+			expected:      false,
+		},
+		{
+			name:          "Valid Hash and Correct Password",
+			configHashB64: validHashB64,
+			inputPassword: validPassword,
+			expected:      true,
+		},
+		{
+			name:          "Valid Hash but Incorrect Password",
+			configHashB64: validHashB64,
+			inputPassword: "wrongpassword",
+			expected:      false,
+		},
+	}
+
+	for _, tc := range tests {
+		t.Run(tc.name, func(t *testing.T) {
+			config.PasswordHashB64 = tc.configHashB64
+			result := manager.ValidatePassword(tc.inputPassword)
+			if result != tc.expected {
+				t.Errorf("ValidatePassword() for %q returned %v, expected %v", tc.name, result, tc.expected)
+			}
+		})
+	}
+}

From 489e3ca0d540bb12d1f96d849bd48864148ae57d Mon Sep 17 00:00:00 2001
From: adcondev <38170282+adcondev@users.noreply.github.com>
Date: Mon, 1 Jun 2026 00:34:50 +0000
Subject: [PATCH 2/2] =?UTF-8?q?test:=20=F0=9F=A7=AA=20Add=20tests=20for=20?=
 =?UTF-8?q?ValidatePassword=20in=20Auth=20Manager?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>