async function expectLocalBackendGatewayClientScopesPreserved(

port: number,

auth: { token?: string; password?: string },

auth: { token?: string; password?: string; skipDefaultAuth?: boolean },

) {

const ws = await openWs(port);

try {

scopes: ["operator.admin"],

device: null,

});

expect(res.ok).toBe(true);

expect(res.ok, JSON.stringify(res)).toBe(true);

const helloOk = res.payload as

| {

});

test("allows auth-none local backend connects without device identity", async () => {

const ws = await openWs(port);

try {

const res = await connectReq(ws, {

skipDefaultAuth: true,

client: { ...BACKEND_GATEWAY_CLIENT },

scopes: ["operator.admin"],

device: null,

});

expect(res.ok, JSON.stringify(res)).toBe(true);

const helloOk = res.payload as

| {

auth?: {

scopes?: unknown;

};

}

| undefined;

expect(helloOk?.auth?.scopes).toEqual(["operator.admin"]);

const adminRes = await rpcReq(ws, "set-heartbeats", { enabled: false });

expect(adminRes.ok).toBe(true);

} finally {

ws.close();

}

await expectLocalBackendGatewayClientScopesPreserved(port, { skipDefaultAuth: true });

});

test("rejects auth-none browser-origin backend connects without device identity", async () => {