codingetandClaude
da4e597f73
Adds 215 tests across three tiers using node:test + node:assert/strict (no new test framework dependencies): - test/tools/ — middleware and utility tests (token, hash, authenticate, jsonBody, convertError, validators) - test/shared/ — DbInterface/BackendDbInterface contract suites reusable across backends (users, abodes, residents, apikeys, sessions, auth) - test/backends/sqlite/ — SQLite-private tests (sql builder, WrappedDb, migrator) + shared suites via SqliteInterface - test/backends/api/ — ApiInterface unit tests + shared suites via a live Koa server backed by SQLite Also fixes four bugs uncovered by the tests: - ApiInterface: path params leaked into query string (slice(1) fix) - ApiInterface: calling res.json() on 204 No Content responses - SqliteInterface.updateResident: missing comma in SET clause - WrappedBetterSqlite3Db: readonly:undefined rejected by better-sqlite3 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
87 lines
2.5 KiB
TypeScript
87 lines
2.5 KiB
TypeScript
import { describe, it } from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import {
|
|
createSessionToken,
|
|
createApikeyToken,
|
|
isSessionToken,
|
|
isApikeyToken,
|
|
} from "../../src/util/token.js";
|
|
|
|
describe("createSessionToken", () => {
|
|
it("starts with 'as_'", () => {
|
|
const token = createSessionToken();
|
|
assert.ok(token.startsWith("as_"), `expected as_ prefix, got: ${token}`);
|
|
});
|
|
|
|
it("has 35 chars total (as_ + 32 hex)", () => {
|
|
const token = createSessionToken();
|
|
assert.equal(token.length, 35);
|
|
});
|
|
|
|
it("suffix is all hex characters", () => {
|
|
const token = createSessionToken();
|
|
const hex = token.slice(3);
|
|
assert.ok(/^[0-9a-f]{32}$/.test(hex), `not all hex: ${hex}`);
|
|
});
|
|
|
|
it("produces different tokens on each call", () => {
|
|
const tokens = new Set(Array.from({ length: 10 }, createSessionToken));
|
|
assert.equal(tokens.size, 10, "all tokens should be unique");
|
|
});
|
|
});
|
|
|
|
describe("createApikeyToken", () => {
|
|
it("starts with 'at_'", () => {
|
|
const token = createApikeyToken();
|
|
assert.ok(token.startsWith("at_"), `expected at_ prefix, got: ${token}`);
|
|
});
|
|
|
|
it("has 35 chars total (at_ + 32 hex)", () => {
|
|
const token = createApikeyToken();
|
|
assert.equal(token.length, 35);
|
|
});
|
|
|
|
it("suffix is all hex characters", () => {
|
|
const token = createApikeyToken();
|
|
const hex = token.slice(3);
|
|
assert.ok(/^[0-9a-f]{32}$/.test(hex), `not all hex: ${hex}`);
|
|
});
|
|
|
|
it("produces different tokens on each call", () => {
|
|
const tokens = new Set(Array.from({ length: 10 }, createApikeyToken));
|
|
assert.equal(tokens.size, 10, "all tokens should be unique");
|
|
});
|
|
});
|
|
|
|
describe("isSessionToken", () => {
|
|
it("returns true for as_ prefixed strings", () => {
|
|
assert.equal(isSessionToken("as_" + "a".repeat(32)), true);
|
|
});
|
|
|
|
it("returns false for at_ prefixed strings", () => {
|
|
assert.equal(isSessionToken("at_abc"), false);
|
|
});
|
|
|
|
it("returns false for empty string", () => {
|
|
assert.equal(isSessionToken(""), false);
|
|
});
|
|
|
|
it("returns false for plain strings", () => {
|
|
assert.equal(isSessionToken("hello"), false);
|
|
});
|
|
});
|
|
|
|
describe("isApikeyToken", () => {
|
|
it("returns true for at_ prefixed strings", () => {
|
|
assert.equal(isApikeyToken("at_" + "b".repeat(32)), true);
|
|
});
|
|
|
|
it("returns false for as_ prefixed strings", () => {
|
|
assert.equal(isApikeyToken("as_abc"), false);
|
|
});
|
|
|
|
it("returns false for empty string", () => {
|
|
assert.equal(isApikeyToken(""), false);
|
|
});
|
|
});
|