Priority: critical
Description
The SEP-10 challenge and verify endpoints need integration tests that exercise the full request/response cycle with a mocked Stellar SDK.
Acceptance Criteria
- Test:
POST /v1/auth/sep10 with valid public key returns a challenge transaction
- Test:
POST /v1/auth/sep10 with missing public key returns 400
- Test:
POST /v1/auth/verify with valid signed tx returns a JWT
- Test:
POST /v1/auth/verify with invalid signature returns 401
- Test:
POST /v1/auth/verify with expired challenge returns 401
Priority: critical
Description
The SEP-10 challenge and verify endpoints need integration tests that exercise the full request/response cycle with a mocked Stellar SDK.
Acceptance Criteria
POST /v1/auth/sep10with valid public key returns a challenge transactionPOST /v1/auth/sep10with missing public key returns 400POST /v1/auth/verifywith valid signed tx returns a JWTPOST /v1/auth/verifywith invalid signature returns 401POST /v1/auth/verifywith expired challenge returns 401