helpyourneighbour/backend/tests/roles.test.js

const request = require('supertest');
const app = require('../app');
const { requireRole } = require('../middleware/role.middleware');

describe('Role-based Access Control', () => {
  // Test that the middleware exists and is a function
  test('requireRole should be a function', () => {
    expect(typeof requireRole).toBe('function');
  });

  // Test that middleware allows access for users with correct role
  test('should allow access for user with correct role', () => {
    // This would need to be implemented with actual JWT mocking
    // For now, just verify the function exists
    const middleware = requireRole(['admin']);
    expect(middleware).toBeDefined();
  });

  // Test that middleware denies access for users without required role
  test('should deny access for user without correct role', () => {
    // This would need to be implemented with actual JWT mocking
    // For now, just verify the function exists
    const middleware = requireRole(['admin']);
    expect(middleware).toBeDefined();
  });
});