DrSmoothl
3c97e71650
Use safer defaults for newly created service endpoints and guide operators toward suitable access credentials without disrupting existing deployments. Apply the same policy at the save boundary, retain deliberate local-only setups and external client compatibility, and add regression coverage for editing, recovery, and trusted access paths.
29 lines
962 B
TypeScript
29 lines
962 B
TypeScript
import { describe, expect, it } from 'vitest';
|
|
import {
|
|
ACCESS_TOKEN_MIN_LENGTH,
|
|
ACCESS_TOKEN_MIN_SCORE,
|
|
assessAccessToken,
|
|
} from '../src/access-token';
|
|
|
|
describe('access token strength', () => {
|
|
it('requires the configured minimum length', () => {
|
|
expect(assessAccessToken('a'.repeat(ACCESS_TOKEN_MIN_LENGTH - 1))).toMatchObject({
|
|
acceptable: false,
|
|
reason: 'too-short',
|
|
});
|
|
});
|
|
|
|
it('scores system and user-specific words as guessable', () => {
|
|
expect(assessAccessToken('SnowLumaSnowLuma', ['SnowLuma', 'OneBot', '10001']))
|
|
.toMatchObject({ acceptable: false, reason: 'guessable' });
|
|
});
|
|
|
|
it('accepts a sufficiently long, hard-to-guess token', () => {
|
|
const result = assessAccessToken('E5xqVb7_9pLt2QwR4M8kZ1nY', ['SnowLuma', 'OneBot']);
|
|
|
|
expect(result.acceptable).toBe(true);
|
|
expect(result.reason).toBe('acceptable');
|
|
expect(result.score).toBeGreaterThanOrEqual(ACCESS_TOKEN_MIN_SCORE);
|
|
});
|
|
});
|