feat(multiplayer): deliver allocated server rosters

server/api/service_test.go

@@ -329,6 +329,44 @@ func TestAuthenticatedWebSocketDeliversOnlyTargetedRevisionedEvents(t *testing.T
 	}
 }
 
+func TestServerRosterRequiresWorkloadBindingAndReturnsRawSignedEnvelopes(t *testing.T) {
+	now := time.Unix(1000, 0).UTC()
+	service := &Service{
+		Now: func() time.Time { return now },
+		WorkloadVerify: func(token string, at time.Time) (domain.WorkloadBinding, error) {
+			if token != "workload-token" || !at.Equal(now) {
+				t.Fatal("unexpected workload verification input")
+			}
+			return domain.WorkloadBinding{ServerID: "server-1", MatchID: "match-1", AllocationID: "allocation-1"}, nil
+		},
+		Roster: func(_ context.Context, binding domain.WorkloadBinding, at time.Time) ([][]byte, error) {
+			if binding.ServerID != "server-1" || binding.MatchID != "match-1" || !at.Equal(now) {
+				t.Fatal("unexpected roster binding")
+			}
+			return [][]byte{[]byte(`{"authorisation":{"player_id":"player-1"},"signature":"sig"}`)}, nil
+		},
+	}
+	server := httptest.NewServer(service.Handler())
+	defer server.Close()
+	request, _ := http.NewRequest(http.MethodGet, server.URL+"/v1/servers/server-1/roster", nil)
+	request.Header.Set("Authorization", "Bearer workload-token")
+	response, err := server.Client().Do(request)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer response.Body.Close()
+	if response.StatusCode != http.StatusOK {
+		t.Fatalf("roster status=%d", response.StatusCode)
+	}
+	var roster []json.RawMessage
+	if err := json.NewDecoder(response.Body).Decode(&roster); err != nil {
+		t.Fatal(err)
+	}
+	if len(roster) != 1 || !bytes.Contains(roster[0], []byte(`"player_id":"player-1"`)) {
+		t.Fatalf("roster=%s", roster[0])
+	}
+}
+
 func readServerWebSocketFrame(reader *bufio.Reader) ([]byte, error) {
 	first, err := reader.ReadByte()
 	if err != nil {