Phase 2: Subsonic REST API framework (auth, response formatting, error handling, routing) plus user permission model

internal/web/router_test.go

@@ -32,15 +32,21 @@ func newTestWeb(t *testing.T) (*Web, *sql.DB) {
 	extauth := &auth.ExtAuth{DB: db, Config: config.ExtAuthConfig{}}
 	mw := &auth.Middleware{Sessions: sessions, ExtAuth: extauth}
 
+	key, err := auth.EncryptionKey(db, "test-secret")
+	if err != nil {
+		t.Fatalf("EncryptionKey: %v", err)
+	}
+
 	h := &Web{
-		DB:         db,
-		Config:     config.Config{},
-		Sessions:   sessions,
-		CSRF:       &auth.CSRF{CookieSecure: false},
-		Middleware: mw,
-		Scanner:    scanner.New(db, &metadata.Prober{}, log),
-		CoverArt:   coverart.New(t.TempDir(), ""),
-		Log:        log,
+		DB:            db,
+		Config:        config.Config{},
+		Sessions:      sessions,
+		CSRF:          &auth.CSRF{CookieSecure: false},
+		Middleware:    mw,
+		Scanner:       scanner.New(db, &metadata.Prober{}, log),
+		CoverArt:      coverart.New(t.TempDir(), ""),
+		EncryptionKey: key,
+		Log:           log,
 	}
 	return h, db
 }