fix: add authz tests

Author: CasLubbers

src/api-v2.authz.test.ts

@@ -156,8 +156,15 @@ describe('API V2 authz tests', () => {
       'deleteCloudtty',
       // Other
       'createTeam',
+      // Git migration
+      'migrateGitSettings',
+      // API status
+      'getApiStatus',
     ]
 
+    // Reset locked state so a prior git migration test does not bleed into subsequent tests
+    otomiStack.locked = false
+
     // Mock all methods with default return values
     v2Methods.forEach((method) => {
       if (typeof (otomiStack as any)[method] === 'function') {
@@ -1109,6 +1116,66 @@ describe('API V2 authz tests', () => {
     })
   })
 
+  describe('V2 Git Migration Endpoint', () => {
+    const gitBody = {
+      repoUrl: 'https://new.example.com/repo.git',
+      username: 'user',
+      password: 'pass',
+      email: 'admin@example.com',
+      branch: 'main',
+    }
+
+    describe('Platform Admin', () => {
+      test('platform admin can migrate git', async () => {
+        await agent.put('/v2/git').send(gitBody).set('Authorization', `Bearer ${platformAdminToken}`).expect(200)
+      })
+    })
+
+    describe('Team Admin', () => {
+      test('team admin cannot migrate git', async () => {
+        await agent.put('/v2/git').send(gitBody).set('Authorization', `Bearer ${teamAdminToken}`).expect(403)
+      })
+    })
+
+    describe('Team Member', () => {
+      test('team member cannot migrate git', async () => {
+        await agent.put('/v2/git').send(gitBody).set('Authorization', `Bearer ${teamMemberToken}`).expect(403)
+      })
+    })
+
+    describe('Unauthenticated', () => {
+      test('anonymous user cannot migrate git', async () => {
+        await agent.put('/v2/git').send(gitBody).expect(401)
+      })
+    })
+  })
+
+  describe('V2 API Status Endpoint', () => {
+    describe('Platform Admin', () => {
+      test('platform admin can get api status', async () => {
+        await agent.get('/v2/status').set('Authorization', `Bearer ${platformAdminToken}`).expect(200)
+      })
+    })
+
+    describe('Team Admin', () => {
+      test('team admin can get api status', async () => {
+        await agent.get('/v2/status').set('Authorization', `Bearer ${teamAdminToken}`).expect(200)
+      })
+    })
+
+    describe('Team Member', () => {
+      test('team member can get api status', async () => {
+        await agent.get('/v2/status').set('Authorization', `Bearer ${teamMemberToken}`).expect(200)
+      })
+    })
+
+    describe('Unauthenticated', () => {
+      test('anonymous user cannot get api status', async () => {
+        await agent.get('/v2/status').expect(401)
+      })
+    })
+  })
+
   test('team member cannot create its own services when disabled', async () => {
     jest.spyOn(otomiStack, 'createService').mockResolvedValue({} as any)
     await agent