test: add coverage for auth/me, credentials, and user profile endpoints (#202)

[BigBen-7]

Summary

Closes #202. Adds unit test coverage for the three critical paths that had zero automated tests:

• tests/api/auth.test.ts — GET /api/auth/me

  • Returns 401 when no session / session has no user id
  • Returns 404 when session user is not found in DB
  • Returns 200 with full user shape on valid session
  • Falls back to default newcomer rank when rank is null
  • Flattens badges from the UserBadge join table

• tests/api/auth-credentials.test.ts — NextAuth Credentials authorize callback (login + register logic)

  • Register: valid signature + username → creates user in DB
  • Register: with email → email stored on new user
  • Login: valid signature, existing user → returns user without creating
  • Invalid signature → returns null (→ 401)
  • Login attempt for non-existent user (no username) → returns null (→ 401)
  • Empty credentials → returns null
  • Malformed wallet key (Keypair.fromPublicKey throws) → returns null

• tests/api/users.test.ts — GET /PATCH /api/users/[id]

  • GET: 200 with profile, 404 for unknown user
  • GET: isFollowing flag set correctly for authenticated and anonymous requests
  • PATCH: 401 when unauthenticated, 403 when updating another user's profile
  • PATCH: 200 on own-profile update, 409 on username/email conflict

Approach

Follows the exact patterns from tests/api/posts.test.ts and tests/api/interactions.unit.test.ts:

• vi.mock / vi.hoisted for all external dependencies (Prisma, auth, Stellar SDK, PrismaAdapter)
• createMockRequest / parseResponse from tests/helpers/api.ts
• All mock data defined inline — no real DB calls

Test plan

• pnpm --filter app test passes locally
• All new test cases reported as passing in CI

[drips-wave]

@BigBen-7 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[3m1n3nc3]

Please fix the failing tests

[BigBen-7]

@3m1n3nc3 fixed