feat: add tests to additions

Author: mtwichel

packages/dart_frog_auth/test/src/dart_frog_auth_test.dart

@@ -456,4 +456,95 @@ void main() {
       });
     });
   });
+
+  group('$cookieAuthentication', () {
+    late RequestContext context;
+    late Request request;
+    _User? user;
+
+    setUp(() {
+      context = _MockRequestContext();
+      request = _MockRequest();
+      when(() => context.provide<_User>(any())).thenReturn(context);
+      when(() => request.headers).thenReturn({});
+      when(() => context.request).thenReturn(request);
+    });
+
+    test('returns 401 when Cookie header is not present', () async {
+      final middleware = cookieAuthentication<_User>(
+        authenticator: (_, __) async => user,
+      );
+      expect(
+        await middleware((_) async => Response())(context),
+        isA<Response>().having(
+          (r) => r.statusCode,
+          'statusCode',
+          HttpStatus.unauthorized,
+        ),
+      );
+    });
+
+    test(
+      'returns 401 when Cookie header is present but no user is returned',
+      () async {
+        when(() => request.headers).thenReturn({'Cookie': 'session=abc123'});
+        final middleware = cookieAuthentication<_User>(
+          authenticator: (_, __) async => null,
+        );
+        expect(
+          await middleware((_) async => Response())(context),
+          isA<Response>().having(
+            (r) => r.statusCode,
+            'statusCode',
+            HttpStatus.unauthorized,
+          ),
+        );
+      },
+    );
+
+    test(
+      'sets the user when everything is valid',
+      () async {
+        user = _User('');
+        when(() => request.headers).thenReturn({
+          'Cookie': 'session=abc123',
+        });
+        final middleware = cookieAuthentication<_User>(
+          authenticator: (_, __) async => user,
+        );
+        expect(
+          await middleware((_) async => Response())(context),
+          isA<Response>().having(
+            (r) => r.statusCode,
+            'statusCode',
+            HttpStatus.ok,
+          ),
+        );
+        final captured = verify(() => context.provide<_User>(captureAny()))
+            .captured
+            .single;
+        expect(
+          (captured as _User Function()).call(),
+          equals(user),
+        );
+      },
+    );
+
+    test("skips routes that doesn't match the custom predicate", () async {
+      var called = false;
+
+      final middleware = cookieAuthentication<_User>(
+        authenticator: (_, __) async {
+          called = true;
+          return null;
+        },
+        applies: (_) async => false,
+      );
+
+      final response = await middleware((_) async => Response())(context);
+
+      expect(called, isFalse);
+      expect(response.statusCode, equals(HttpStatus.ok));
+    });
+  });
 }