feat(playlists): share playlists with revocable read-only links

services/api/internal/playback/playlists_test.go

@@ -1,8 +1,11 @@
 package playback
 
 import (
+	"context"
 	"github.com/google/uuid"
 	"github.com/stretchr/testify/require"
+	"pipu/api/internal/api/gen"
+	"pipu/api/internal/platform/apperr"
 	"strings"
 	"testing"
 )
@@ -19,3 +22,14 @@ func TestValidatePlaylist(t *testing.T) {
 	require.Error(t, validatePlaylist("Mix", "", []uuid.UUID{uuid.Nil}))
 	require.Error(t, validatePlaylist("Mix", "", make([]uuid.UUID, 2001)))
 }
+
+func TestPlaylistSharingRequiresAuthentication(t *testing.T) {
+	h := &Handler{}
+	ctx := context.Background()
+	_, err := h.SharePlaylist(ctx, gen.SharePlaylistRequestObject{Id: uuid.New()})
+	require.ErrorIs(t, err, apperr.Unauthorized("auth.unauthorized", ""))
+	_, err = h.RevokePlaylistShare(ctx, gen.RevokePlaylistShareRequestObject{Id: uuid.New()})
+	require.ErrorIs(t, err, apperr.Unauthorized("auth.unauthorized", ""))
+	_, err = h.GetSharedPlaylist(ctx, gen.GetSharedPlaylistRequestObject{ShareId: uuid.New()})
+	require.ErrorIs(t, err, apperr.Unauthorized("auth.unauthorized", ""))
+}