test(schema): add Testcontainers schema validation for MariaDB and PostgreSQL (#286)

Validate that Hibernate can create the full schema without errors on
real MariaDB and PostgreSQL instances via Testcontainers. Tests verify:
- All 10 expected tables (entities + join tables) are created
- WebAuthn byte[] columns map to BLOB-compatible types (longblob on
  MariaDB, bytea on PostgreSQL) rather than inline VARBINARY

Adds testcontainers-postgresql and testcontainers-junit-jupiter deps.

Author: devondragon

build.gradle

@@ -90,7 +90,9 @@ dependencies {
 
     // Additional test dependencies for improved testing
     testImplementation 'org.testcontainers:testcontainers:2.0.3'
+    testImplementation 'org.testcontainers:testcontainers-junit-jupiter:2.0.3'
     testImplementation 'org.testcontainers:testcontainers-mariadb:2.0.3'
+    testImplementation 'org.testcontainers:testcontainers-postgresql:2.0.3'
     testImplementation 'com.github.tomakehurst:wiremock:3.0.1'
     testImplementation 'com.tngtech.archunit:archunit-junit5:1.4.1'
     testImplementation 'org.assertj:assertj-core:3.27.7'

src/test/java/com/digitalsanctuary/spring/user/persistence/schema/AbstractSchemaValidationTest.java

@@ -0,0 +1,85 @@
+package com.digitalsanctuary.spring.user.persistence.schema;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import com.digitalsanctuary.spring.user.test.app.TestApplication;
+import java.util.List;
+import java.util.Set;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.jdbc.core.JdbcTemplate;
+
+/**
+ * Abstract base class for database schema validation tests. Subclasses provide a real database via Testcontainers and
+ * configure Spring to connect to it. This test verifies that Hibernate can create the full schema without errors on each
+ * target database.
+ *
+ * <p>
+ * The test uses {@code ddl-auto: create} (via Spring Boot properties) and then queries
+ * {@code INFORMATION_SCHEMA.TABLES} to verify all expected tables were created. This catches silent DDL failures like
+ * the one described in GitHub issue #286.
+ * </p>
+ */
+@SpringBootTest(classes = TestApplication.class)
+abstract class AbstractSchemaValidationTest {
+
+	/**
+	 * All tables expected to be created by Hibernate from the entity model. Includes entity tables and join tables.
+	 */
+	private static final Set<String> EXPECTED_TABLES = Set.of(
+			// Entity tables
+			"user_account", "role", "privilege", "verification_token", "password_reset_token",
+			"password_history_entry", "user_entities", "user_credentials",
+			// Join tables
+			"users_roles", "roles_privileges");
+
+	@Autowired
+	private JdbcTemplate jdbcTemplate;
+
+	@Test
+	@DisplayName("should create all expected tables without errors")
+	void shouldCreateAllExpectedTables() {
+		List<String> tables = jdbcTemplate.queryForList(
+				"SELECT LOWER(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE LOWER(table_schema) = LOWER(?)",
+				String.class, getSchemaName());
+
+		assertThat(tables)
+				.as("All entity and join tables should be created by Hibernate on %s", getDatabaseName())
+				.containsAll(EXPECTED_TABLES);
+	}
+
+	@Test
+	@DisplayName("should create WebAuthn byte[] columns as BLOB-compatible types (not inline VARBINARY)")
+	void shouldCreateWebAuthnBlobColumns() {
+		List<String> blobColumns = List.of("public_key", "attestation_object", "attestation_client_data_json");
+
+		for (String column : blobColumns) {
+			String dataType = jdbcTemplate.queryForObject(
+					"SELECT LOWER(data_type) FROM INFORMATION_SCHEMA.COLUMNS "
+							+ "WHERE LOWER(table_schema) = LOWER(?) AND LOWER(table_name) = 'user_credentials' "
+							+ "AND LOWER(column_name) = ?",
+					String.class, getSchemaName(), column);
+
+			assertThat(dataType)
+					.as("Column '%s' on %s should be a BLOB-compatible type, not VARBINARY", column, getDatabaseName())
+					.isIn(getAllowedBlobTypes());
+		}
+	}
+
+	/**
+	 * Returns the human-readable database name for assertion messages.
+	 */
+	protected abstract String getDatabaseName();
+
+	/**
+	 * Returns the schema name used in INFORMATION_SCHEMA queries. MariaDB/MySQL uses the database name as schema;
+	 * PostgreSQL uses 'public' by default.
+	 */
+	protected abstract String getSchemaName();
+
+	/**
+	 * Returns the set of column data types considered acceptable for BLOB columns on this database.
+	 */
+	protected abstract Set<String> getAllowedBlobTypes();
+}

src/test/java/com/digitalsanctuary/spring/user/persistence/schema/MariaDBSchemaValidationTest.java

@@ -0,0 +1,51 @@
+package com.digitalsanctuary.spring.user.persistence.schema;
+
+import java.util.Set;
+import org.junit.jupiter.api.DisplayName;
+import org.springframework.test.context.DynamicPropertyRegistry;
+import org.springframework.test.context.DynamicPropertySource;
+import org.testcontainers.containers.MariaDBContainer;
+import org.testcontainers.junit.jupiter.Container;
+import org.testcontainers.junit.jupiter.Testcontainers;
+
+/**
+ * Validates that Hibernate can create the full schema on MariaDB without errors. This specifically catches the InnoDB
+ * row-size limit issue described in GitHub issue #286 where VARBINARY(65535) columns caused silent table creation
+ * failure.
+ */
+@Testcontainers
+@DisplayName("MariaDB Schema Validation Tests")
+class MariaDBSchemaValidationTest extends AbstractSchemaValidationTest {
+
+	@Container
+	static final MariaDBContainer<?> MARIADB = new MariaDBContainer<>("mariadb:11.4")
+			.withDatabaseName("testdb")
+			.withUsername("test")
+			.withPassword("test");
+
+	@DynamicPropertySource
+	static void configureProperties(DynamicPropertyRegistry registry) {
+		registry.add("spring.datasource.url", MARIADB::getJdbcUrl);
+		registry.add("spring.datasource.username", MARIADB::getUsername);
+		registry.add("spring.datasource.password", MARIADB::getPassword);
+		registry.add("spring.datasource.driver-class-name", () -> "org.mariadb.jdbc.Driver");
+		registry.add("spring.jpa.hibernate.ddl-auto", () -> "create");
+		registry.add("spring.jpa.database-platform", () -> "org.hibernate.dialect.MariaDBDialect");
+		registry.add("spring.jpa.properties.hibernate.dialect", () -> "org.hibernate.dialect.MariaDBDialect");
+	}
+
+	@Override
+	protected String getDatabaseName() {
+		return "MariaDB";
+	}
+
+	@Override
+	protected String getSchemaName() {
+		return "testdb";
+	}
+
+	@Override
+	protected Set<String> getAllowedBlobTypes() {
+		return Set.of("longblob", "mediumblob", "blob");
+	}
+}

src/test/java/com/digitalsanctuary/spring/user/persistence/schema/PostgreSQLSchemaValidationTest.java

@@ -0,0 +1,51 @@
+package com.digitalsanctuary.spring.user.persistence.schema;
+
+import java.util.Set;
+import org.junit.jupiter.api.DisplayName;
+import org.springframework.test.context.DynamicPropertyRegistry;
+import org.springframework.test.context.DynamicPropertySource;
+import org.testcontainers.containers.PostgreSQLContainer;
+import org.testcontainers.junit.jupiter.Container;
+import org.testcontainers.junit.jupiter.Testcontainers;
+
+/**
+ * Validates that Hibernate can create the full schema on PostgreSQL without errors. Ensures the byte[] columns map to
+ * {@code bytea} (not {@code oid}), which would happen if {@code @Lob} were used instead of
+ * {@code length = Length.LONG32}.
+ */
+@Testcontainers
+@DisplayName("PostgreSQL Schema Validation Tests")
+class PostgreSQLSchemaValidationTest extends AbstractSchemaValidationTest {
+
+	@Container
+	static final PostgreSQLContainer<?> POSTGRES = new PostgreSQLContainer<>("postgres:17")
+			.withDatabaseName("testdb")
+			.withUsername("test")
+			.withPassword("test");
+
+	@DynamicPropertySource
+	static void configureProperties(DynamicPropertyRegistry registry) {
+		registry.add("spring.datasource.url", POSTGRES::getJdbcUrl);
+		registry.add("spring.datasource.username", POSTGRES::getUsername);
+		registry.add("spring.datasource.password", POSTGRES::getPassword);
+		registry.add("spring.datasource.driver-class-name", () -> "org.postgresql.Driver");
+		registry.add("spring.jpa.hibernate.ddl-auto", () -> "create");
+		registry.add("spring.jpa.database-platform", () -> "org.hibernate.dialect.PostgreSQLDialect");
+		registry.add("spring.jpa.properties.hibernate.dialect", () -> "org.hibernate.dialect.PostgreSQLDialect");
+	}
+
+	@Override
+	protected String getDatabaseName() {
+		return "PostgreSQL";
+	}
+
+	@Override
+	protected String getSchemaName() {
+		return "public";
+	}
+
+	@Override
+	protected Set<String> getAllowedBlobTypes() {
+		return Set.of("bytea");
+	}
+}