feat: harden data access and simplify user management

admin-web/tests/sshKeyGeneration.test.ts

@@ -0,0 +1,15 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { generateDbeaverSshKeyPair } from "../src/sshKey.ts";
+
+test("DBeaver SSH private key is generated locally in a compatible PEM format", async () => {
+  const result = await generateDbeaverSshKeyPair("Alice Admin");
+
+  assert.match(result.privateKeyPem, /^-----BEGIN PRIVATE KEY-----/);
+  assert.match(result.privateKeyPem, /-----END PRIVATE KEY-----\n$/);
+  assert.match(result.publicKey, /^ssh-rsa [A-Za-z0-9+/]+=* nianxx-Alice_Admin$/);
+  assert.match(result.privateKeyFilename, /\.pem$/);
+  assert.match(result.publicKeyFilename, /\.pub$/);
+  assert.equal(result.publicKey.includes("PRIVATE KEY"), false);
+});