Rename Basking to Nurse

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

internal/web/web_test.go

@@ -16,8 +16,8 @@ import (
 	"testing"
 	"time"
 
-	"git.veillax.com/Veillax/basking/internal/config"
-	"git.veillax.com/Veillax/basking/internal/oidc"
+	"git.veillax.com/Veillax/nurse/internal/config"
+	"git.veillax.com/Veillax/nurse/internal/oidc"
 )
 
 // idp is a stand-in for Authentik: it publishes its metadata and trades the code "good" for an ID
@@ -51,7 +51,7 @@ func newIdP(t *testing.T) *idp {
 			json.NewEncoder(w).Encode(map[string]string{"error": "invalid_grant"})
 			return
 		}
-		c := map[string]any{"iss": p.srv.URL + "/app/", "aud": "basking-client", "exp": time.Now().Add(time.Hour).Unix(), "nonce": p.nonce}
+		c := map[string]any{"iss": p.srv.URL + "/app/", "aud": "nurse-client", "exp": time.Now().Add(time.Hour).Unix(), "nonce": p.nonce}
 		for k, v := range p.claims {
 			c[k] = v
 		}
@@ -79,13 +79,13 @@ func setup(t *testing.T, tweak func(map[string]any)) *env {
 	dir := t.TempDir()
 	conf := map[string]any{
 		"data_dir": filepath.Join(dir, "data"), "public_url": "http://127.0.0.1:8490", "secret": "test-secret",
-		"oidc": map[string]string{"issuer": p.srv.URL + "/app/", "client_id": "basking-client", "client_secret": "shh"},
+		"oidc": map[string]string{"issuer": p.srv.URL + "/app/", "client_id": "nurse-client", "client_secret": "shh"},
 	}
 	if tweak != nil {
 		tweak(conf)
 	}
 	b, _ := json.Marshal(conf)
-	path := filepath.Join(dir, "basking.json")
+	path := filepath.Join(dir, "nurse.json")
 	os.WriteFile(path, b, 0o600)
 	h, err := config.Load(path)
 	if err != nil {
@@ -112,7 +112,7 @@ func (e *env) do(method, path string, body any, cookies []*http.Cookie, hdr ...s
 		r.Header.Set("Content-Type", "application/json")
 	}
 	if method != http.MethodGet {
-		r.Header.Set("X-Basking", "1")
+		r.Header.Set("X-Nurse", "1")
 	}
 	for i := 0; i+1 < len(hdr); i += 2 {
 		if hdr[i+1] == "" {
@@ -184,7 +184,7 @@ func TestNothingWorksWithoutSigningIn(t *testing.T) {
 	if w := e.do("POST", "/api/notes", map[string]string{"body": "x"}, nil); w.Code != http.StatusUnauthorized {
 		t.Errorf("POST without a session: %d", w.Code)
 	}
-	if w := e.do("GET", "/", nil, nil); w.Code != http.StatusOK || !strings.Contains(w.Body.String(), "Basking") {
+	if w := e.do("GET", "/", nil, nil); w.Code != http.StatusOK || !strings.Contains(w.Body.String(), "Nurse") {
 		t.Errorf("the sign-in page itself must load: %d", w.Code)
 	}
 	if w := e.do("GET", "/healthz", nil, nil); w.Code != http.StatusOK {
@@ -202,7 +202,7 @@ func TestSignInFlow(t *testing.T) {
 	if !strings.HasPrefix(to.String(), e.idp.srv.URL+"/authorize?") {
 		t.Fatalf("goes to Authentik: %s", to)
 	}
-	for k, want := range map[string]string{"response_type": "code", "client_id": "basking-client", "redirect_uri": "http://127.0.0.1:8490/auth/callback",
+	for k, want := range map[string]string{"response_type": "code", "client_id": "nurse-client", "redirect_uri": "http://127.0.0.1:8490/auth/callback",
 		"scope": "openid profile email", "code_challenge_method": "S256"} {
 		if q.Get(k) != want {
 			t.Errorf("%s = %q, want %q", k, q.Get(k), want)
@@ -310,7 +310,7 @@ func TestSignInIsRefusedWhenAnythingIsOff(t *testing.T) {
 		return good(to)
 	}, "unavailable")
 
-	// and a next address that points anywhere but inside Basking is dropped
+	// and a next address that points anywhere but inside Nurse is dropped
 	for _, bad := range []string{"https://evil.example.com", "//evil.example.com", "/api/export", "#/<script>", "javascript:alert(1)"} {
 		to, flow := e.begin(bad)
 		e.idp.mu.Lock()
@@ -393,10 +393,10 @@ func TestSessionsAreSignedAndExpire(t *testing.T) {
 func TestWritesNeedTheHeader(t *testing.T) {
 	e := setup(t, nil)
 	ses := e.signIn(alice)
-	if w := e.do("POST", "/api/notes", map[string]string{"body": "x"}, ses, "X-Basking", ""); w.Code != http.StatusForbidden {
+	if w := e.do("POST", "/api/notes", map[string]string{"body": "x"}, ses, "X-Nurse", ""); w.Code != http.StatusForbidden {
 		t.Fatalf("a write without the header: %d", w.Code)
 	}
-	if w := e.do("DELETE", "/api/trash", nil, ses, "X-Basking", ""); w.Code != http.StatusForbidden {
+	if w := e.do("DELETE", "/api/trash", nil, ses, "X-Nurse", ""); w.Code != http.StatusForbidden {
 		t.Fatalf("a delete without the header: %d", w.Code)
 	}
 }
@@ -542,7 +542,7 @@ func TestPageLifecycle(t *testing.T) {
 	for _, f := range zr.File {
 		names = append(names, f.Name)
 	}
-	if fmt.Sprint(names) != "[basking/Journal/2026-10-31.md basking/Plans 2027.md basking/Trip.md]" && len(names) != 3 {
+	if fmt.Sprint(names) != "[nurse/Journal/2026-10-31.md nurse/Plans 2027.md nurse/Trip.md]" && len(names) != 3 {
 		t.Fatalf("export has %v", names)
 	}
 }
@@ -576,14 +576,14 @@ func TestSecurityHeaders(t *testing.T) {
 
 func TestServerWillNotStartHalfConfigured(t *testing.T) {
 	dir := t.TempDir()
-	path := filepath.Join(dir, "basking.json")
+	path := filepath.Join(dir, "nurse.json")
 	os.WriteFile(path, []byte(`{"public_url":"https://notes.example.com"}`), 0o600)
 	h, _ := config.Load(path)
 	_, err := New(h, "t")
 	if err == nil {
 		t.Fatal("started without Authentik settings")
 	}
-	for _, want := range []string{"oidc.issuer", "BASKING_OIDC_CLIENT_ID", "client_secret", "/auth/callback"} {
+	for _, want := range []string{"oidc.issuer", "NURSE_OIDC_CLIENT_ID", "client_secret", "/auth/callback"} {
 		if !strings.Contains(err.Error(), want) {
 			t.Errorf("the message should mention %q:\n%v", want, err)
 		}
@@ -593,7 +593,7 @@ func TestServerWillNotStartHalfConfigured(t *testing.T) {
 	if _, err := New(h, "t"); err == nil || !strings.Contains(err.Error(), "https") {
 		t.Errorf("plain http on a real host should be refused: %v", err)
 	}
-	t.Setenv("BASKING_PUBLIC_URL", "https://notes.example.com")
+	t.Setenv("NURSE_PUBLIC_URL", "https://notes.example.com")
 	h, _ = config.Load(path)
 	if _, err := New(h, "t"); err != nil {
 		t.Errorf("environment settings should override the file: %v", err)