test: update integration tests for Echo v5 compatibility

Update all integration test files to work with Echo v5 changes.

Changes in new_fixes_test.go:
- Update test helper signatures for *echo.Context
- Fix context handling in test assertions

Changes in security_test.go:
- Update security test signatures for Echo v5

Changes in test_helpers.go:
- Update test setup for Echo v5
- Fix context type usage in test helpers

Changes in websocket_test.go:
- Update WebSocket test for Echo v5 compatibility
- Fix response wrapper usage for v5 API
- Update hijacker interface expectations
  - Echo v5 now properly implements rwUnwrapper
  - WebSocket upgrade works natively without custom wrappers

All tests now properly work with Echo v5's pointer-based context
and improved WebSocket support.

cmd/server/tests/new_fixes_test.go

@@ -6,7 +6,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/labstack/echo/v4"
+	"github.com/labstack/echo/v5"
 	"github.com/stretchr/testify/assert"
 )
 
@@ -39,7 +39,7 @@ func TestRateLimiter(t *testing.T) {
 	e := echo.New()
 
 	// Create a simple handler
-	handler := func(c echo.Context) error {
+	handler := func(c *echo.Context) error {
 		return c.String(http.StatusOK, "ok")
 	}
 
@@ -108,7 +108,7 @@ func (m *mockRateLimiter) Allow(ip string) bool {
 
 func rateLimiterMiddleware(rl *mockRateLimiter) echo.MiddlewareFunc {
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(c echo.Context) error {
+		return func(c *echo.Context) error {
 			ip := c.RealIP()
 			if ip == "" {
 				ip = c.Request().RemoteAddr

cmd/server/tests/security_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/labstack/echo/v4"
+	"github.com/labstack/echo/v5"
 	"github.com/stretchr/testify/assert"
 )
 
@@ -94,7 +94,7 @@ func TestRateLimiterSecurity(t *testing.T) {
 	rl := ratelimit.NewRateLimiter(config)
 	rateLimitMiddleware := ratelimit.RateLimiterMiddleware(rl)
 
-	handler := func(c echo.Context) error {
+	handler := func(c *echo.Context) error {
 		return c.String(http.StatusOK, "ok")
 	}
 

cmd/server/tests/test_helpers.go

@@ -26,8 +26,8 @@ import (
 	"github.com/google/uuid"
 	"github.com/jackc/pgx/v5/pgtype"
 	"github.com/jackc/pgx/v5/pgxpool"
-	"github.com/labstack/echo/v4"
+	"github.com/labstack/echo/v5"
-	echomiddleware "github.com/labstack/echo/v4/middleware"
+	echomiddleware "github.com/labstack/echo/v5/middleware"
 	"github.com/stretchr/testify/require"
 )
 
@@ -486,7 +486,7 @@ func setupTestServer(t *testing.T) *TestServerSetup {
 	e.Validator = &CustomValidator{validator: v}
 
 	// Middleware
-	e.Use(echomiddleware.Logger())
+	e.Use(echomiddleware.RequestLogger())
 	e.Use(echomiddleware.Recover())
 	e.Use(echomiddleware.CORS())
 
@@ -523,12 +523,13 @@ func setupTestServer(t *testing.T) *TestServerSetup {
 	ln, err := net.Listen("tcp", "127.0.0.1:0")
 	require.NoError(t, err, "Failed to create listener")
 	// Configure Echo's HTTP server with the listener
-	e.Server.Handler = e
+	serverConfig := &http.Server{
-	e.Server.Addr = ln.Addr().String()
+		Handler: e,
-	// Create test server using Echo's server config (supports WebSocket hijacking)
+		Addr:    ln.Addr().String(),
+	}
 	ts := &httptest.Server{
 		Listener: ln,
-		Config:   e.Server,
+		Config:   serverConfig,
 	}
 	ts.Start()
 

cmd/server/tests/websocket_test.go

@@ -2,8 +2,10 @@ package main
 
 import (
 	"bookhoard/internal/database"
+	"bytes"
 	"context"
 	"encoding/json"
+	"fmt"
 	"net/http"
 	"strings"
 	"testing"
@@ -68,20 +70,34 @@ func TestWebSocketDeviceAuth(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	// Connect to WebSocket with device token
+	// Use gorilla/websocket's RequestHeader support
 	wsURL := strings.Replace(setup.Server.URL, "http", "ws", 1) + "/ws/sync?token=device-auth-test"
-	req, _ := http.NewRequest("GET", wsURL, nil)
+	// Create dialer with custom headers
-	req.Header.Set("Authorization", "Bearer test-device-token-"+deviceID.String())
+	dialer := &websocket.Dialer{
-
+		HandshakeTimeout: 5 * time.Second,
-	// We can't easily test WebSocket with custom headers using gorilla/websocket
+	}
-	// So this test just verifies the device exists
+	headers := http.Header{}
-	device, err := setup.DB.GetDeviceByAuthToken(context.Background(), "test-device-token-"+deviceID.String())
+	headers.Set("Authorization", "Bearer test-device-token-"+deviceID.String())
+	// Connect with device token in header
+	ws, resp, err := dialer.Dial(wsURL, headers)
+	require.NoError(t, err, "WebSocket connection with device token should succeed")
+	defer ws.Close()
+	if resp != nil {
+		defer resp.Body.Close()
+		require.Equal(t, http.StatusSwitchingProtocols, resp.StatusCode, "Should upgrade to WebSocket")
+	}
+	// Read initial state message
+	ws.SetReadDeadline(time.Now().Add(5 * time.Second))
+	_, msg, err := ws.ReadMessage()
+	require.NoError(t, err, "Should receive initial state message")
+	var initialMsg map[string]interface{}
+	err = json.Unmarshal(msg, &initialMsg)
 	require.NoError(t, err)
-	assert.Equal(t, "Test KOReader", device.DeviceName)
+	assert.Equal(t, "initial_state", initialMsg["type"])
 }
 
 // TestWebSocketProgressBroadcast tests that progress updates are broadcast to connected clients
-/* func TestWebSocketProgressBroadcast(t *testing.T) {
+func TestWebSocketProgressBroadcast(t *testing.T) {
 	setup := setupTestServer(t)
 
 	// Get JWT token
@@ -140,10 +156,10 @@ assert.InDelta(t, 0.5, data["percentage"], 0.01)
 
 	sourceDevice := broadcastMsg["source_device"].(map[string]interface{})
 	assert.Equal(t, "web", sourceDevice["type"])
-} */
+}
 
 // TestWebSocketPingPong tests that ping/pong messages work correctly
-/* func TestWebSocketPingPong(t *testing.T) {
+func TestWebSocketPingPong(t *testing.T) {
 	setup := setupTestServer(t)
 
 	token := setup.Token
@@ -172,10 +188,10 @@ if err == nil {
 			assert.Equal(t, "pong", pongMsg["type"])
 		}
 	}
-} */
+}
 
 // TestWebSocketConnectionLimit tests that the server handles multiple connections
-/* func TestWebSocketConnectionLimit(t *testing.T) {
+func TestWebSocketConnectionLimit(t *testing.T) {
 	setup := setupTestServer(t)
 
 	token := setup.Token
@@ -197,9 +213,9 @@ if err == nil {
 	for _, ws := range connections {
 		ws.Close()
 	}
-} */
+}
 
-/* // TestWebSocketInvalidToken tests that invalid tokens are rejected
+// TestWebSocketInvalidToken tests that invalid tokens are rejected
 func TestWebSocketInvalidToken(t *testing.T) {
 	setup := setupTestServer(t)
 
@@ -215,7 +231,7 @@ func TestWebSocketInvalidToken(t *testing.T) {
 		return
 	}
 	assert.Error(t, err)
-	} */
+}
 
 // Helper function to create a test media item
 func createTestMediaItem(t *testing.T, db *database.Queries, userID uuid.UUID) string {
@@ -241,7 +257,7 @@ func createTestMediaItem(t *testing.T, db *database.Queries, userID uuid.UUID) s
 	return uuid.UUID(mediaID.ID.Bytes).String()
 }
 
-/* // TestWebSocketUserScopedBroadcast tests that broadcasts only go to the user who made changes
+// TestWebSocketUserScopedBroadcast tests that broadcasts only go to the user who made changes
 func TestWebSocketUserScopedBroadcast(t *testing.T) {
 	setup := setupTestServer(t)
 	client := &http.Client{}
@@ -307,7 +323,7 @@ func TestWebSocketUserScopedBroadcast(t *testing.T) {
 	if err == nil {
 		t.Errorf("Regular user should not receive collection_updated message")
 	}
-} */
+}
 
 // Helper: connectWebSocketToServer establishes WebSocket connection with auth token
 func connectWebSocketToServer(t *testing.T, serverURL string, token string) *websocket.Conn {