admin
62b7cdaf1e
- Test 1: getPresignedUrl generates URL with correct contentType and avatars/-scoped key - Test 2: getPresignedUrl rejects non-owner with FORBIDDEN (T-4-01) - Test 3: getPresignedUrl rejects image/gif (Zod enum validation, T-4-02) - Test 4: getPresignedUrl rejects 11MB file (T-4-06 fileSize limit) - Test 5: confirmUpload writes avatarKey to DB with correct update call - Test 6: confirmUpload rejects path traversal key (T-4-05) - Bonus: confirmUpload rejects non-owner with FORBIDDEN (T-4-01) - Mock getPresignedUploadUrl via vi.mock — no real R2 calls