codex-bot
134bc2c9cc
waterfall-wiki CI and deployment / verify-and-deploy (pull_request) Failing after 11m56s
24 lines
1.9 KiB
TypeScript
24 lines
1.9 KiB
TypeScript
import assert from 'node:assert/strict';
|
|
import { randomUUID } from 'node:crypto';
|
|
import { db } from '../src/lib/db';
|
|
import { hashPassword,newToken,tokenDigest } from '../src/lib/account-crypto';
|
|
import { loginAccount,verifyAccount,currentAccount,logoutAccount,rateLimit } from '../src/lib/account';
|
|
export async function verifyEmailAccounts() {
|
|
const id=randomUUID(), email=id+'@example.com', password='a secure test password';
|
|
const request=(token:string)=>new Request('https://wiki.example',{headers:{cookie:'wiki_account='+token}});
|
|
try {
|
|
await db().query('INSERT INTO account_users(id,email,password_hash) VALUES ($1,$2,$3)',[id,email,await hashPassword(password)]);
|
|
assert.equal(await loginAccount(email,password),null,'unverified accounts cannot log in');
|
|
const verification=newToken();await db().query("INSERT INTO account_tokens VALUES ($1,$2,'verify',now()+interval '1 minute')",[tokenDigest(verification),id]);
|
|
const results=await Promise.all([verifyAccount(verification),verifyAccount(verification)]);assert.deepEqual(results.sort(),[false,true]);
|
|
assert.equal(await loginAccount(email,'incorrect password'),null);
|
|
const token=await loginAccount(email,password);assert.ok(token);
|
|
assert.equal((await currentAccount(request(token))).id,id);
|
|
await db().query("UPDATE account_tokens SET expires_at=now()-interval '1 second' WHERE digest=$1",[tokenDigest(token)]);
|
|
assert.equal(await currentAccount(request(token)),null,'expired sessions rejected');
|
|
const fresh=await loginAccount(email,password);assert.ok(fresh);await logoutAccount(request(fresh));assert.equal(await currentAccount(request(fresh)),null,'logout revokes token');
|
|
const key=randomUUID();assert.deepEqual(await Promise.all(Array.from({length:5},()=>rateLimit(key,3))).then(a=>a.sort()),[false,false,true,true,true]);
|
|
await db().query('DELETE FROM account_limits WHERE key=$1',[tokenDigest(key)]);
|
|
} finally {await db().query('DELETE FROM account_users WHERE id=$1',[id]);}
|
|
}
|