From ca5ca12dba6d77162768f716e12db4125dd11a3d Mon Sep 17 00:00:00 2001
From: Brandon Wolfgang <developer@brandonwolfgang.com>
Date: Wed, 21 Oct 2026 19:54:55 -0500
Subject: [PATCH] test: reject non-string echo messages - Verify POST /echo
 returns HTTP 400 for non-string message values - Assert invalid request
 bodies receive the expected generic error response

---
 src/server.test.ts | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/src/server.test.ts b/src/server.test.ts
index faf69a3..7317a2a 100644
--- a/src/server.test.ts
+++ b/src/server.test.ts
@@ -95,6 +95,23 @@ describe("API endpoints", () => {
     });
   });
 
+  it("POST /echo rejects a non-string message", async () => {
+    const message = "a".repeat(501);
+
+    const response = await app.inject({
+      method: "POST",
+      url: "/echo",
+      payload: {
+        message: 123,
+      },
+    });
+
+    assert.equal(response.statusCode, 400);
+    assert.deepEqual(response.json(), {
+      error: "Invalid request body",
+    });
+  });
+
   it("returns 404 for an unknown endpoint", async () => {
     const response = await app.inject({
       method: "GET",