fix: reading a single article follows the same rule as the list: anyone can read an online article, a verified user can also read an offline one, and an unknown or hidden id returns 404

test/public_article_listing_test.go

@@ -56,11 +56,11 @@ func newPublicArticleListingRouter(articleRepo *mockArticleRepo, token *jwtauth.
 			r.Use(jwtauth.Verifier(token))
 			r.Group(func(r chi.Router) {
 				r.Get("/", articleHandler.ListArticles)
+				r.Get("/{id}", articleHandler.GetArticle)
 			})
 			r.Group(func(r chi.Router) {
 				r.Use(jwtauth.Authenticator(token))
 				r.Use(middleware.RequireVerifiedUser(getUserUseCase))
-				r.Get("/{id}", articleHandler.GetArticle)
 				r.Post("/", articleHandler.PostArticle)
 				r.Delete("/{id}", articleHandler.DeleteArticle)
 			})
@@ -155,7 +155,6 @@ func TestPublicArticleListingHttp(t *testing.T) {
 		path   string
 		body   []byte
 	}{
-		{"GET /v1/article/1 with no jwt cookie answers 401", http.MethodGet, "/v1/article/1", nil},
 		{"POST /v1/article/ with no jwt cookie answers 401", http.MethodPost, "/v1/article/", []byte(`{"title":"Valid Title","body":"Some content"}`)},
 		{"DELETE /v1/article/1 with no jwt cookie answers 401", http.MethodDelete, "/v1/article/1", nil},
 	}