0.2.64 update

server/internal/config/config_test.go

@@ -1,10 +1,42 @@
 package config
 
 import (
+	"os"
+	"path/filepath"
 	"testing"
 	"time"
 )
 
+func TestReleasePublishTokenCanComeFromSecretFile(t *testing.T) {
+	t.Setenv("MEMBY_EMBY_URL", "http://emby")
+	t.Setenv("MEMBY_DATABASE_URL", "postgres://memby")
+	t.Setenv("MEMBY_PUBLIC_URL", "https://memby.example")
+	t.Setenv("MEMBY_RELEASE_PUBLISH_TOKEN", "legacy-environment-value")
+	path := filepath.Join(t.TempDir(), "release-token")
+	if err := os.WriteFile(path, []byte("file-backed-token\n"), 0o600); err != nil {
+		t.Fatal(err)
+	}
+	t.Setenv("MEMBY_RELEASE_PUBLISH_TOKEN_FILE", path)
+
+	cfg, err := Load()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if cfg.ReleasePublishToken != "file-backed-token" {
+		t.Fatalf("release token = %q, want the file-backed value", cfg.ReleasePublishToken)
+	}
+}
+
+func TestConfiguredReleaseSecretFileMustBeReadable(t *testing.T) {
+	t.Setenv("MEMBY_EMBY_URL", "http://emby")
+	t.Setenv("MEMBY_DATABASE_URL", "postgres://memby")
+	t.Setenv("MEMBY_RELEASE_PUBLISH_TOKEN_FILE", filepath.Join(t.TempDir(), "missing"))
+
+	if _, err := Load(); err == nil {
+		t.Fatal("expected a missing release token secret to fail")
+	}
+}
+
 func TestTracearrURLAndKeyMustBeConfiguredTogether(t *testing.T) {
 	t.Setenv("MEMBY_EMBY_URL", "http://emby")
 	t.Setenv("MEMBY_DATABASE_URL", "postgres://memby")