Add /dbapi/users route for creating new user

test/Feature/AuthSpec.hs

@@ -1,9 +1,10 @@
-{-# LANGUAGE OverloadedStrings #-}
+{-# LANGUAGE OverloadedStrings, QuasiQuotes #-}
 module Feature.AuthSpec where
 
 -- {{{ Imports
 import Test.Hspec
 import Test.Hspec.Wai
+import Test.Hspec.Wai.JSON
 import Network.HTTP.Types
 
 import SpecHelper
@@ -15,10 +16,11 @@ spec = around appWithFixture $
     it "hides tables that anonymous does not own" $
       get "/authors_only" `shouldRespondWith` 400 -- TODO: should be 404
     it "indicates login failure" $ do
-      let auth = authHeader "dbapi_test_author_a" "fakefake"
+      let auth = authHeader "dbapi_test_author" "fakefake"
       request methodGet "/authors_only" [auth] ""
         `shouldRespondWith` 401
-    -- it "allows users with permissions to see their tables" $ do
-    --   let auth = authHeader "dbapi_test_author_a" ""
-    --   request methodGet "/authors_only" [auth] ""
-    --     `shouldRespondWith` 200
+    it "allows users with permissions to see their tables" $ do
+      _ <- post "/dbapi/users" [json| { "id":"jdoe", "pass": "1234", "role": "dbapi_test_author" } |]
+      let auth = authHeader "jdoe" "1234"
+      request methodGet "/authors_only" [auth] ""
+        `shouldRespondWith` 200