commit - f7343271475afeb77d58192090163b743028da2d
commit + 8b1fbea42df752ceccc0ef9c67b19654193a40c9
blob - 66964a49085c780a925222748bbd44341b0cf53f
blob + 87fca2fd9d4ead7070761c6425db3e6a9f615e36
--- web/web_test.go
+++ web/web_test.go
@@ -17,11 +17,14 @@ const (
 	testPassword = "secret"
 )
 
-func newTestStores() (*mailmux.AliasDB, *mailmux.UserDB, error) {
+func newTestStores(t *testing.T) (*mailmux.AliasDB, *mailmux.UserDB, error) {
 	tmpdb, err := os.CreateTemp("", "")
 	if err != nil {
 		return nil, nil, err
 	}
+	t.Cleanup(func() {
+		os.Remove(tmpdb.Name())
+	})
 	aliasdb, err := mailmux.OpenAliasDB(tmpdb.Name(), "/usr/share/dict/words")
 	if err != nil {
 		return nil, nil, err
@@ -37,7 +40,7 @@ func newTestStores() (*mailmux.AliasDB, *mailmux.UserD
 }
 
 func TestBadRegister(t *testing.T) {
-	aliasdb, userdb, err := newTestStores()
+	aliasdb, userdb, err := newTestStores(t)
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -91,7 +94,7 @@ func TestBadRegister(t *testing.T) {
 
 // TestAliasLifecycle tests creating, reading, updating then deleting an alias.
 func TestAliasLifecycle(t *testing.T) {
-	aliasdb, userdb, err := newTestStores()
+	aliasdb, userdb, err := newTestStores(t)
 	if err != nil {
 		t.Fatal(err)
 	}