From 7cfc601ddbd166ce28641fc1f8673cd73e5cb660 Mon Sep 17 00:00:00 2001
From: Alex Ababii <a.ababii@opencloud.eu>
Date: Wed, 7 Oct 2026 12:41:11 +0200
Subject: [PATCH] feat(authguest): fix codacy issues

---
 services/auth-guest/README.md                     | 3 ++-
 services/auth-guest/pkg/server/http/renew_test.go | 7 ++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/services/auth-guest/README.md b/services/auth-guest/README.md
index 047eb12f5c..3bf4c1783a 100644
--- a/services/auth-guest/README.md
+++ b/services/auth-guest/README.md
@@ -178,7 +178,8 @@ Alias: `.../guestLinks/verify/token`
 
 #### `POST .../guestLinks/renew`
 
-- **Request body:** `{ "permissionId": "<share-id>", "token": "<previous link token>" }`
+- **Request body:**
+  `{ "permissionId": "<share-id>", "token": "<previous link token>" }`
   (`token` optional when the session cookie is sent)
 - **Authorization:** the share id is required; the body link token or the
   session cookie must belong to it, the link token takes precedence
diff --git a/services/auth-guest/pkg/server/http/renew_test.go b/services/auth-guest/pkg/server/http/renew_test.go
index 62c3edd878..4da0304890 100644
--- a/services/auth-guest/pkg/server/http/renew_test.go
+++ b/services/auth-guest/pkg/server/http/renew_test.go
@@ -57,7 +57,12 @@ func TestRenewHandlerWithSessionCookie(t *testing.T) {
 	require.NoError(t, err)
 
 	req := httptest.NewRequest(http.MethodPost, "/", strings.NewReader(string(body)))
-	req.AddCookie(&http.Cookie{Name: testCookieName, Value: "session-token"})
+	req.AddCookie(&http.Cookie{
+		Name:     testCookieName,
+		Value:    "session-token",
+		HttpOnly: true,
+		Secure:   true,
+	})
 
 	rr := httptest.NewRecorder()
 	newRenewHandler(t, svcMock)(rr, req)