From a4e74f425fb5d0ed5f55fe1dbd2c050e00a8b05b Mon Sep 17 00:00:00 2001
From: 4gray <serega05@gmail.com>
Date: Sun, 9 Aug 2026 14:35:45 +0200
Subject: [PATCH] test(stalker): align simple portal session guard

---
 .../lib/collection/stream-resolver.service.spec.ts   | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/libs/portal/shared/data-access/src/lib/collection/stream-resolver.service.spec.ts b/libs/portal/shared/data-access/src/lib/collection/stream-resolver.service.spec.ts
index a5451750f..32209a282 100644
--- a/libs/portal/shared/data-access/src/lib/collection/stream-resolver.service.spec.ts
+++ b/libs/portal/shared/data-access/src/lib/collection/stream-resolver.service.spec.ts
@@ -995,7 +995,7 @@ describe('StreamResolverService', () => {
         expect(playback.headers?.['Authorization']).toBeUndefined();
     });
 
-    it('does not authenticate a simple portal for playback headers', async () => {
+    it('guards a simple portal without requiring playback auth headers', async () => {
         playlistsService.getPlaylistById.mockReturnValue(
             of({
                 _id: 'stalker-2',
@@ -1006,7 +1006,7 @@ describe('StreamResolverService', () => {
         );
         stalkerSession.getCachedToken.mockReturnValue(null);
 
-        await service.resolvePlayback({
+        const playback = await service.resolvePlayback({
             uid: 'stalker::stalker-2::99',
             name: 'Simple Radio',
             contentType: 'live',
@@ -1018,7 +1018,13 @@ describe('StreamResolverService', () => {
             stalkerCmd: 'https://simple.example.com/radio/99.mp3',
         } satisfies UnifiedCollectionItem);
 
-        expect(stalkerSession.ensureToken).not.toHaveBeenCalled();
+        expect(stalkerSession.ensureToken).toHaveBeenCalledWith(
+            expect.objectContaining({
+                _id: 'stalker-2',
+                isFullStalkerPortal: false,
+            })
+        );
+        expect(playback.headers?.['Authorization']).toBeUndefined();
     });
 
     it('keeps Stalker collection playback from a foreign CDN credential-free', async () => {