1 files changed, 38 insertions, 0 deletions

diff --git a/internal/auth/auth_test.go b/internal/auth/auth_test.go
index 1f0efee..7a0da19 100644
--- a/internal/auth/auth_test.go
+++ b/internal/auth/auth_test.go
@@ -304,3 +304,41 @@ func TestHashPayload(t *testing.T) {
                 t.Error("different payloads produced same hash")
         }
 }
+
+func TestIsWriteMethod(t *testing.T) {
+        tests := []struct {
+                method string
+                want   bool
+        }{
+                // Write methods
+                {"/nostr.v1.NostrRelay/PublishEvent", true},
+                {"/nostr.v1.NostrRelay/DeleteEvent", true},
+                {"/admin.v1.Admin/CreateUser", true},
+                {"/admin.v1.Admin/UpdateSettings", true},
+                {"/data.v1.Data/InsertRecord", true},
+                {"/data.v1.Data/RemoveItem", true},
+                {"/storage.v1.Storage/SetValue", true},
+                {"/storage.v1.Storage/PutObject", true},
+
+                // Read methods
+                {"/nostr.v1.NostrRelay/QueryEvents", false},
+                {"/nostr.v1.NostrRelay/Subscribe", false},
+                {"/nostr.v1.NostrRelay/GetEvent", false},
+                {"/admin.v1.Admin/ListUsers", false},
+                {"/health.v1.Health/Check", false},
+                {"/info.v1.Info/GetRelayInfo", false},
+
+                // Edge cases
+                {"", false},
+                {"/", false},
+        }
+
+        for _, tt := range tests {
+                t.Run(tt.method, func(t *testing.T) {
+                        got := isWriteMethod(tt.method)
+                        if got != tt.want {
+                                t.Errorf("isWriteMethod(%q) = %v, want %v", tt.method, got, tt.want)
+                        }
+                })
+        }
+}