Portal: Mitarbeiter-Login gesperrt (Hinweis aufs Ticketsystem), alte Mitarbeiter-Sitzungen enden

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

test/kundenansichtEnde.test.js

@@ -10,7 +10,7 @@ const aw = await startAppwriteMock({ schema: { customerViewLog: schemaKeys('cust
 const st = await startFakeStripe()
 useTestEnv({ appwriteUrl: aw.url, stripeUrl: st.url })
 const { config } = await import('../server/config.js')
-const { startTestApp, get, post } = await import('./support/testApp.js')
+const { startTestApp, post } = await import('./support/testApp.js')
 const { seedFixtures, kundenansichtCookie, viewAsCookie } = await import('./support/fixtures.js')
 const { kundenansichtGuard } = await import('../server/middleware/kundenansichtGuard.js')
 const { default: authRoutes } = await import('../server/routes/auth.js')
@@ -81,9 +81,8 @@ test('/me abgelaufen -> authenticated false, reason view_expired, Protokoll abge
   assert.equal(logOf('abgelaufen').length, before + 1)
 })
 
-test('/me alte Ansicht (viewAsCookie) unveraendert: viewAs true, keine viewId', async () => {
-  const body = await get('/api/auth/me', { cookie: viewAsCookie('c1') })
-  assert.equal(body.viewAs, true)
-  assert.equal(body.viewId, undefined)
-  assert.equal(body.admin.name, 'Kenso')
+test('/me alte Ansicht (viewAsCookie, ohne viewId): beendet, reason staff, Weiterleitung ins Ticketsystem', async () => {
+  const res = await me(viewAsCookie('c1'))
+  assert.deepEqual(res.body, { authenticated: false, reason: 'staff', redirect: 'https://ticket.webklar.com' })
+  assert.equal(res.headers.getSetCookie().some((c) => c.startsWith(`${config.cookieName}=`) && /Expires=Thu, 01 Jan 1970/.test(c)), true)
 })