package middleware import ( "testing" "github.com/gofiber/fiber/v2" "github.com/stretchr/testify/require" ) func TestValidateScope_AllowsOrgContextReadOnly(t *testing.T) { require.True(t, validateScope(fiber.MethodGet, "/api/v1/integrations/org-context", "org-context:read")) require.False(t, validateScope(fiber.MethodPost, "/api/v1/integrations/org-context", "org-context:read")) require.False(t, validateScope(fiber.MethodGet, "/api/v1/integrations/org-context", "tenant:read")) require.False(t, validateScope(fiber.MethodGet, "/api/v1/orgfront/org-context", "org-context:read")) }