feat(auth.apikeys): IApiKeyStoreMigrator abstraction — SQLite implements it, DI registers it via TryAdd so a provider registered first wins; ApiKeyAdminCommands accepts the interface (old ctor kept)

Claude-Session: https://claude.ai/code/session_013L3XdmVii9i5sY4FChU8pB
2026-09-02 14:06:14 -04:00
parent 300094e792
commit 3f11704d10
6 changed files with 85 additions and 10 deletions
@@ -5,6 +5,7 @@ using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Options;
 using ZB.MOM.WW.Auth.Abstractions.ApiKeys;
 using ZB.MOM.WW.Auth.ApiKeys.DependencyInjection;
+using ZB.MOM.WW.Auth.ApiKeys.Sqlite;

 namespace ZB.MOM.WW.Auth.ApiKeys.Tests;

@@ -197,4 +198,37 @@ public class ApiKeyServiceCollectionExtensionsTests
                File.Delete(sqlitePath);
        }
    }
+
+    [Fact]
+    public void AddZbApiKeyAuth_RegistersSqliteMigratorAsIApiKeyStoreMigrator()
+    {
+        IConfiguration config = BuildConfiguration(TempSqlitePath());
+        var services = new ServiceCollection();
+
+        services.AddZbApiKeyAuth(config, ApiKeySection);
+
+        using ServiceProvider sp = services.BuildServiceProvider();
+
+        Assert.IsType<SqliteAuthStoreMigrator>(sp.GetRequiredService<IApiKeyStoreMigrator>());
+        Assert.Same(sp.GetRequiredService<SqliteAuthStoreMigrator>(), sp.GetRequiredService<IApiKeyStoreMigrator>());
+    }
+
+    [Fact]
+    public void AddZbApiKeyAuth_LeavesPreRegisteredMigratorInPlace()
+    {
+        var services = new ServiceCollection();
+        var fake = new FakeMigrator();
+        services.AddSingleton<IApiKeyStoreMigrator>(fake);
+
+        services.AddZbApiKeyAuth(BuildConfiguration(TempSqlitePath()), ApiKeySection);
+
+        using ServiceProvider sp = services.BuildServiceProvider();
+
+        Assert.Same(fake, sp.GetRequiredService<IApiKeyStoreMigrator>());
+    }
+
+    private sealed class FakeMigrator : IApiKeyStoreMigrator
+    {
+        public Task MigrateAsync(CancellationToken ct) => Task.CompletedTask;
+    }
 }