From 72784c238a1c2101cf6c00a817cb79c9eafacc3a Mon Sep 17 00:00:00 2001
From: vsxd <sun.xd@hotmail.com>
Date: Fri, 13 Mar 2026 10:28:17 +0800
Subject: [PATCH] test(ops): expand local smoke coverage for auth sessions

---
 scripts/smoke-test.sh | 54 +++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 52 insertions(+), 2 deletions(-)

diff --git a/scripts/smoke-test.sh b/scripts/smoke-test.sh
index 4a80e0f4..e4fc7382 100755
--- a/scripts/smoke-test.sh
+++ b/scripts/smoke-test.sh
@@ -5,6 +5,10 @@ BASE_URL="${1:-http://localhost:8080}"
 PASS=0
 FAIL=0
 COOKIE_JAR="$(mktemp)"
+USERNAME="smoketest_$(date +%s)"
+EMAIL="${USERNAME}@example.com"
+PASSWORD="Smoke@2026"
+NEW_PASSWORD="Smoke@2027"
 
 cleanup() {
   rm -f "$COOKIE_JAR"
@@ -42,10 +46,11 @@ CSRF_TOKEN="$(awk '$6 == "XSRF-TOKEN" { print $7 }' "$COOKIE_JAR" | tail -n 1)"
 REGISTER_STATUS="$(curl -s -o /dev/null -w "%{http_code}" \
   -X POST "$BASE_URL/api/v1/auth/local/register" \
   -b "$COOKIE_JAR" \
+  -c "$COOKIE_JAR" \
   -H "X-XSRF-TOKEN: $CSRF_TOKEN" \
   -H "Content-Type: application/json" \
-  -d '{"username":"smoketest","password":"Smoke@2026","email":"smoketest@example.com"}')"
-if [[ "$REGISTER_STATUS" == "200" || "$REGISTER_STATUS" == "409" ]]; then
+  -d "{\"username\":\"$USERNAME\",\"password\":\"$PASSWORD\",\"email\":\"$EMAIL\"}")"
+if [[ "$REGISTER_STATUS" == "200" ]]; then
   echo "PASS: Register (HTTP $REGISTER_STATUS)"
   PASS=$((PASS + 1))
 else
@@ -53,6 +58,51 @@ else
   FAIL=$((FAIL + 1))
 fi
 
+AUTH_ME_STATUS="$(curl -s -o /dev/null -w "%{http_code}" -b "$COOKIE_JAR" "$BASE_URL/api/v1/auth/me")"
+if [[ "$AUTH_ME_STATUS" == "200" ]]; then
+  echo "PASS: Auth me with session (HTTP $AUTH_ME_STATUS)"
+  PASS=$((PASS + 1))
+else
+  echo "FAIL: Auth me with session (got $AUTH_ME_STATUS)"
+  FAIL=$((FAIL + 1))
+fi
+
+CHANGE_PASSWORD_STATUS="$(curl -s -o /dev/null -w "%{http_code}" \
+  -X POST "$BASE_URL/api/v1/auth/local/change-password" \
+  -b "$COOKIE_JAR" \
+  -H "X-XSRF-TOKEN: $CSRF_TOKEN" \
+  -H "Content-Type: application/json" \
+  -d "{\"currentPassword\":\"$PASSWORD\",\"newPassword\":\"$NEW_PASSWORD\"}")"
+if [[ "$CHANGE_PASSWORD_STATUS" == "200" ]]; then
+  echo "PASS: Change password (HTTP $CHANGE_PASSWORD_STATUS)"
+  PASS=$((PASS + 1))
+else
+  echo "FAIL: Change password (got $CHANGE_PASSWORD_STATUS)"
+  FAIL=$((FAIL + 1))
+fi
+
+LOGOUT_STATUS="$(curl -s -o /dev/null -w "%{http_code}" \
+  -X POST "$BASE_URL/api/v1/auth/logout" \
+  -b "$COOKIE_JAR" \
+  -c "$COOKIE_JAR" \
+  -H "X-XSRF-TOKEN: $CSRF_TOKEN")"
+if [[ "$LOGOUT_STATUS" == "302" || "$LOGOUT_STATUS" == "200" || "$LOGOUT_STATUS" == "204" ]]; then
+  echo "PASS: Logout (HTTP $LOGOUT_STATUS)"
+  PASS=$((PASS + 1))
+else
+  echo "FAIL: Logout (got $LOGOUT_STATUS)"
+  FAIL=$((FAIL + 1))
+fi
+
+POST_LOGOUT_STATUS="$(curl -s -o /dev/null -w "%{http_code}" -b "$COOKIE_JAR" "$BASE_URL/api/v1/auth/me")"
+if [[ "$POST_LOGOUT_STATUS" == "401" ]]; then
+  echo "PASS: Auth me after logout (HTTP $POST_LOGOUT_STATUS)"
+  PASS=$((PASS + 1))
+else
+  echo "FAIL: Auth me after logout (got $POST_LOGOUT_STATUS)"
+  FAIL=$((FAIL + 1))
+fi
+
 echo
 echo "Results: $PASS passed, $FAIL failed"
 if [[ "$FAIL" -ne 0 ]]; then