Fix tests: update C2 server initialization to include JWT service

Updated all test files that create C2 servers to include the JWT
service parameter that was added in the previous commits:

- internal/c2/c2test/grpc.go: Test helper for C2 tests
- internal/c2/reverse_shell_e2e_test.go: E2E reverse shell test
- internal/portals/integration_test.go: Portal integration tests
- internal/portals/benchmark_test.go: Portal benchmark tests

Each test now generates ephemeral ed25519 keys and creates a JWT
service before initializing the C2 server, matching the updated
c2.New() signature.

Author: claude

tavern/internal/c2/c2test/grpc.go

@@ -2,6 +2,8 @@ package c2test
 
 import (
 	"context"
+	"crypto/ed25519"
+	"crypto/rand"
 	"errors"
 	"net"
 	"testing"
@@ -19,6 +21,7 @@ import (
 	"realm.pub/tavern/internal/ent"
 	"realm.pub/tavern/internal/ent/enttest"
 	"realm.pub/tavern/internal/http/stream"
+	"realm.pub/tavern/internal/jwt"
 	"realm.pub/tavern/internal/portals/mux"
 )
 
@@ -49,10 +52,16 @@ func New(t *testing.T) (c2pb.C2Client, *ent.Client, func()) {
 	grpcShellMux := stream.NewMux(grpcOutTopic, grpcInSub)
 	portalMux := mux.New(mux.WithInMemoryDriver())
 
+	// JWT Service for testing
+	pubKey, privKey, err := ed25519.GenerateKey(rand.Reader)
+	require.NoError(t, err)
+	jwtService, err := jwt.NewService(privKey, pubKey)
+	require.NoError(t, err)
+
 	// gRPC Server
 	lis := bufconn.Listen(1024 * 1024 * 10)
 	baseSrv := grpc.NewServer()
-	c2pb.RegisterC2Server(baseSrv, c2.New(graph, grpcShellMux, portalMux))
+	c2pb.RegisterC2Server(baseSrv, c2.New(graph, grpcShellMux, portalMux, jwtService))
 
 	grpcErrCh := make(chan error, 1)
 	go func() {

tavern/internal/c2/reverse_shell_e2e_test.go

@@ -2,6 +2,8 @@ package c2_test
 
 import (
 	"context"
+	"crypto/ed25519"
+	"crypto/rand"
 	"net"
 	"net/http/httptest"
 	"strconv"
@@ -21,6 +23,7 @@ import (
 	"realm.pub/tavern/internal/c2/c2pb"
 	"realm.pub/tavern/internal/ent/enttest"
 	"realm.pub/tavern/internal/http/stream"
+	"realm.pub/tavern/internal/jwt"
 	"realm.pub/tavern/internal/portals/mux"
 
 	_ "github.com/mattn/go-sqlite3"
@@ -62,10 +65,16 @@ func TestReverseShell_E2E(t *testing.T) {
 	grpcMux := stream.NewMux(pubOutput, subInput)
 	portalMux := mux.New(mux.WithInMemoryDriver())
 
+	// Setup JWT service for testing
+	pubKey, privKey, err := ed25519.GenerateKey(rand.Reader)
+	require.NoError(t, err)
+	jwtService, err := jwt.NewService(privKey, pubKey)
+	require.NoError(t, err)
+
 	go wsMux.Start(ctx)
 	go grpcMux.Start(ctx)
 
-	c2pb.RegisterC2Server(s, c2.New(graph, grpcMux, portalMux))
+	c2pb.RegisterC2Server(s, c2.New(graph, grpcMux, portalMux, jwtService))
 	go func() {
 		if err := s.Serve(lis); err != nil {
 			t.Logf("Server exited with error: %v", err)

tavern/internal/portals/benchmark_test.go

@@ -2,6 +2,7 @@ package portals_test
 
 import (
 	"context"
+	"crypto/ed25519"
 	"crypto/rand"
 	"fmt"
 	"log/slog"
@@ -25,6 +26,7 @@ import (
 	"realm.pub/tavern/internal/ent/task"
 	"realm.pub/tavern/internal/ent/tome"
 	"realm.pub/tavern/internal/http/stream"
+	"realm.pub/tavern/internal/jwt"
 	"realm.pub/tavern/internal/portals"
 	"realm.pub/tavern/internal/portals/mux"
 	"realm.pub/tavern/portals/portalpb"
@@ -92,7 +94,17 @@ func BenchmarkPortalThroughput(b *testing.B) {
 	// Create a placeholder shellMux since C2 requires it, but we won't use it.
 	var shellMux *stream.Mux = nil
 
-	c2Srv := c2.New(client, shellMux, portalMux)
+	// Setup JWT service for testing
+	pubKey, privKey, err := ed25519.GenerateKey(rand.Reader)
+	if err != nil {
+		b.Fatalf("failed to generate ed25519 key: %v", err)
+	}
+	jwtService, err := jwt.NewService(privKey, pubKey)
+	if err != nil {
+		b.Fatalf("failed to create JWT service: %v", err)
+	}
+
+	c2Srv := c2.New(client, shellMux, portalMux, jwtService)
 	portalSrv := portals.New(client, portalMux)
 
 	// 4. Start gRPC Server

tavern/internal/portals/integration_test.go

@@ -2,6 +2,8 @@ package portals_test
 
 import (
 	"context"
+	"crypto/ed25519"
+	"crypto/rand"
 	"fmt"
 	"net"
 	"testing"
@@ -19,6 +21,7 @@ import (
 	"realm.pub/tavern/internal/ent"
 	"realm.pub/tavern/internal/ent/enttest"
 	"realm.pub/tavern/internal/http/stream"
+	"realm.pub/tavern/internal/jwt"
 	"realm.pub/tavern/internal/portals"
 	"realm.pub/tavern/internal/portals/mux"
 	"realm.pub/tavern/portals/portalpb"
@@ -58,7 +61,13 @@ func SetupTestEnv(t *testing.T) *TestEnv {
 	ctxMux, cancelMux := context.WithCancel(ctx)
 	go c2StreamMux.Start(ctxMux)
 
-	c2Server := c2.New(entClient, c2StreamMux, portalMux)
+	// Setup JWT service for testing
+	pubKey, privKey, err := ed25519.GenerateKey(rand.Reader)
+	require.NoError(t, err)
+	jwtService, err := jwt.NewService(privKey, pubKey)
+	require.NoError(t, err)
+
+	c2Server := c2.New(entClient, c2StreamMux, portalMux, jwtService)
 	portalServer := portals.New(entClient, portalMux)
 
 	// 4. Setup gRPC Listener with bufconn