admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
65 lines
2.1 KiB
TypeScript
65 lines
2.1 KiB
TypeScript
import { describe, it, expect, beforeEach, vi } from 'vitest'
|
|
import { verifyCronSecret } from '../cron'
|
|
|
|
describe('verifyCronSecret', () => {
|
|
beforeEach(() => {
|
|
vi.unstubAllEnvs()
|
|
})
|
|
|
|
it('returns 401 when CRON_SECRET is not set', () => {
|
|
vi.stubEnv('CRON_SECRET', '')
|
|
const request = new Request('http://localhost/api/cron', {
|
|
headers: { authorization: 'Bearer test-secret' },
|
|
})
|
|
const result = verifyCronSecret(request)
|
|
expect(result).not.toBeNull()
|
|
expect(result!.status).toBe(401)
|
|
})
|
|
|
|
it('returns 401 when no authorization header is provided', () => {
|
|
vi.stubEnv('CRON_SECRET', 'test-secret')
|
|
const request = new Request('http://localhost/api/cron')
|
|
const result = verifyCronSecret(request)
|
|
expect(result).not.toBeNull()
|
|
expect(result!.status).toBe(401)
|
|
})
|
|
|
|
it('returns 401 when token does not match', () => {
|
|
vi.stubEnv('CRON_SECRET', 'correct-secret')
|
|
const request = new Request('http://localhost/api/cron', {
|
|
headers: { authorization: 'Bearer wrong-secret' },
|
|
})
|
|
const result = verifyCronSecret(request)
|
|
expect(result).not.toBeNull()
|
|
expect(result!.status).toBe(401)
|
|
})
|
|
|
|
it('returns null (authorized) when Bearer token matches', () => {
|
|
vi.stubEnv('CRON_SECRET', 'correct-secret')
|
|
const request = new Request('http://localhost/api/cron', {
|
|
headers: { authorization: 'Bearer correct-secret' },
|
|
})
|
|
const result = verifyCronSecret(request)
|
|
expect(result).toBeNull()
|
|
})
|
|
|
|
it('returns null (authorized) when bare token matches', () => {
|
|
vi.stubEnv('CRON_SECRET', 'correct-secret')
|
|
const request = new Request('http://localhost/api/cron', {
|
|
headers: { authorization: 'correct-secret' },
|
|
})
|
|
const result = verifyCronSecret(request)
|
|
expect(result).toBeNull()
|
|
})
|
|
|
|
it('handles tokens of different lengths safely', () => {
|
|
vi.stubEnv('CRON_SECRET', 'short')
|
|
const request = new Request('http://localhost/api/cron', {
|
|
headers: { authorization: 'Bearer a-much-longer-token-that-differs-in-length' },
|
|
})
|
|
const result = verifyCronSecret(request)
|
|
expect(result).not.toBeNull()
|
|
expect(result!.status).toBe(401)
|
|
})
|
|
})
|