feat(groups): add fail-closed admission management

2026-08-01 18:36:45 -04:00
parent 19a5d04178
commit b88097c15a
32 changed files with 1910 additions and 29 deletions
@@ -0,0 +1,12 @@
+import { describe, expect, it } from "vitest";
+import { enabledAccessGroup } from "../src/index";
+
+describe("group-based admission", () => {
+  it("denies default-off users and allows access when any assigned group is enabled", () => {
+    expect(enabledAccessGroup([{ name: "everyone", accessEnabled: false }])).toBeNull();
+    expect(enabledAccessGroup([
+      { name: "everyone", accessEnabled: false },
+      { name: "ops", accessEnabled: true },
+    ])).toEqual({ name: "ops", accessEnabled: true });
+  });
+});