Page MenuHomeSealhub
Files F10352638

password.test.ts
No OneTemporary
Actions

password.test.ts
View Options

import assert from "assert";
import { withRunningApp } from "../../../test_utils/with-test-app.js";
import SecureHasher from "../../../utils/secure-hasher.js";
import type { App } from "../../app.js";
import { assertThrowsAsync } from "../../../test_utils/assert-throws-async.js";
describe("password", () => {
const username = "some-user";
const password = "it-really-doesnt-matter";
let user_id: string;
async function setup(app: App) {
user_id = (
await app.collections.users.suCreate({
username,
password,
})
).id;
}
it("Hides password", async () =>
withRunningApp(null, async ({ app, rest_api }) => {
await setup(app);
const session = await rest_api.login({
username,
password,
});
assert.ok(
!(
await rest_api.get(
`/api/v1/collections/users/${user_id}`,
session
)
).password
);
assert.equal(
(await app.collections.users.suGetByID(user_id)).get(
"password"
),
"secret"
);
}));
it("Stores correct password value", async () =>
withRunningApp(null, async ({ app }) => {
await setup(app);
const hashed_password = (
await app.Datastore.find("users", {
id: user_id,
})
)[0]!.password as string;
assert.ok(await SecureHasher.matches(password, hashed_password));
assert.ok(
!(await SecureHasher.matches("wrong-password", hashed_password))
);
assert.ok(!(await SecureHasher.matches("", hashed_password)));
}));
it("doesn't change when given a null value", async () =>
withRunningApp(null, async ({ app }) => {
await setup(app);
// should pass without problem
await app.collections.sessions.login(username, password);
// this shouldn't change the password
(await app.collections.users.suGetByID(user_id))
.set("password", null)
.save(new app.SuperContext());
// should still pass without problem
await app.collections.sessions.login(username, password);
await assertThrowsAsync(() =>
app.collections.sessions.login(username, "some-other-password")
);
}));
it("doesn't change when given an undefined value", async () =>
withRunningApp(null, async ({ app }) => {
await setup(app);
// this shouldn't change the password
(await app.collections.users.suGetByID(user_id))
.set("password", undefined)
.save(new app.SuperContext());
// should still pass without problem
await app.collections.sessions.login(username, password);
await assertThrowsAsync(() =>
app.collections.sessions.login(username, "some-other-password")
);
}));
});

File Metadata

Mime Type
text/x-java
Expires
Sun, Nov 2, 17:33 (14 h, 21 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
1016446
Default Alt Text
password.test.ts (2 KB)

Event Timeline