Refactor Study Desk application structure

src/lib/publicPaths.test.ts

@@ -0,0 +1,25 @@
+import { describe, expect, it } from "vitest";
+import { isPublicPath } from "./publicPaths";
+
+describe("isPublicPath", () => {
+  it.each([
+    "/login",
+    "/api/auth/login",
+    "/api/health",
+    "/shared/class/quizzes/token",
+    "/_next/static/chunk.js",
+    "/favicon.ico",
+  ])("allows intentional public path %s", (pathname) => {
+    expect(isPublicPath(pathname)).toBe(true);
+  });
+
+  it.each([
+    "/private/file.txt",
+    "/api/decks/file.json",
+    "/api/authentication/fake",
+    "/shared-secret",
+    "/private/%2e%2e/data",
+  ])("does not bypass authentication for %s", (pathname) => {
+    expect(isPublicPath(pathname)).toBe(false);
+  });
+});