feat(tasks): implement atomic claims and leases

backend-api/internal/transport/httpapi/router_test.go

@@ -120,7 +120,9 @@ func TestRouterRequiresDependencies(t *testing.T) {
 		Database:             fakePinger{},
 		RegisterPublicRoutes: discardRoutes,
 		RegisterAdminRoutes:  discardRoutes,
+		RegisterDeviceRoutes: discardRoutes,
 		AdminSessions:        allowAdminAuthenticator{},
+		DeviceAccess:         allowAdminAuthenticator{},
 		LogEvent:             discardEvent,
 	}
 	missingDatabase := valid
@@ -138,11 +140,21 @@ func TestRouterRequiresDependencies(t *testing.T) {
 	if _, err := NewRouter(missingPublicRoutes); err == nil {
 		t.Fatal("NewRouter(nil public routes) error = nil")
 	}
+	missingDeviceRoutes := valid
+	missingDeviceRoutes.RegisterDeviceRoutes = nil
+	if _, err := NewRouter(missingDeviceRoutes); err == nil {
+		t.Fatal("NewRouter(nil device routes) error = nil")
+	}
 	missingAuth := valid
 	missingAuth.AdminSessions = nil
 	if _, err := NewRouter(missingAuth); err == nil {
 		t.Fatal("NewRouter(nil admin auth) error = nil")
 	}
+	missingDeviceAuth := valid
+	missingDeviceAuth.DeviceAccess = nil
+	if _, err := NewRouter(missingDeviceAuth); err == nil {
+		t.Fatal("NewRouter(nil device auth) error = nil")
+	}
 	missingLogger := valid
 	missingLogger.LogEvent = nil
 	if _, err := NewRouter(missingLogger); err == nil {
@@ -158,7 +170,9 @@ func newTestRouter(
 		Database:             database,
 		RegisterPublicRoutes: discardRoutes,
 		RegisterAdminRoutes:  discardRoutes,
+		RegisterDeviceRoutes: discardRoutes,
 		AdminSessions:        allowAdminAuthenticator{},
+		DeviceAccess:         allowAdminAuthenticator{},
 		LogEvent:             logEvent,
 	})
 }
@@ -255,6 +269,19 @@ func (allowAdminAuthenticator) AuthenticateAdmin(
 	}, nil
 }
 
+func (allowAdminAuthenticator) AuthenticateAccessToken(
+	context.Context,
+	string,
+) (domain.AuthPrincipal, error) {
+	return domain.AuthPrincipal{
+		UserID:    "00000000-0000-4000-8000-000000000098",
+		Username:  "buyer",
+		Role:      domain.UserRoleBuyer,
+		DeviceID:  "00000000-0000-4000-8000-000000000097",
+		ExpiresAt: time.Now().Add(time.Hour),
+	}, nil
+}
+
 var requestIDPattern = regexp.MustCompile(
 	`^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`,
 )