Engineer Unit Test Coverage for Cron Route Authentication Middleware

[temma02]

Description

apps/backend/src/lib/api/cron-auth.ts has no co-located test file, despite gating every /api/cron/* route from unauthenticated invocation. Its shared-secret comparison logic is currently unverified by automated tests, which is a meaningful gap for an authentication boundary.

Requirements and Context

• Cover the valid-secret-header success path.
• Cover the missing-header and wrong-secret rejection paths, asserting the correct HTTP status.
• If the implementation uses a timing-safe comparison, assert it does (equal-length wrong secrets should still be rejected).

Suggested Execution

Branch: test/cron-auth-middleware-coverage

Implement Changes

• Create apps/backend/src/lib/api/cron-auth.test.ts.
• Cover the valid, missing, and incorrect secret cases described above using a mocked NextRequest.

Test and Commit

Run npm run test --workspace=@craft/backend -- cron-auth and confirm the new suite passes.

Example Commit Message

test(backend): add unit coverage for cron route authentication middleware

Co-authored-by: <your-name>

Guidelines

• Branch off main, keep PRs focused on one issue
• All new code must include unit or integration tests
• Ensure npm run lint and the relevant npm run test workspace pass before review
• Link this issue in your PR description
• Request review from at least one maintainer before merging

[Haroldwonder]

@Haroldwonder has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Can I get to work on this?

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Haroldwonder to this issue.

[drips-wave]

Congratulations, @Haroldwonder! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @Haroldwonder: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊