GameCult/Bifrost
Watch
9
0
Fork
You've already forked Bifrost
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions 1

Heimdall tests: a genuine attempt cookie under a name that is no slot is no attempt

Browse source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Meta Vens 2026-10-11 22:41:31 +02:00
commit d463336206
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tests/Bifrost.Web.Tests/HeimdallCompletionTests.cs
View file

@ -449,6 +449,11 @@ public sealed class HeimdallCompletionTests
Assert.False(refused.Response.Headers.Contains("Set-Cookie"), name); Assert.False(refused.Response.Headers.Contains("Set-Cookie"), name);
} }
// A genuine cookie value under a name that is no slot is no attempt either: request input never names a slot.
var offRing = await host.CompleteAsync(attempt.Nonce, code, attempt.Cookie, HeimdallAttemptCookie.Prefix + "9");
AssertRefusedRedirect(offRing);
Assert.False(offRing.Response.Headers.Contains("Set-Cookie"));
Assert.Equal(0, host.Heimdall.RedeemCalls); Assert.Equal(0, host.Heimdall.RedeemCalls);
Assert.Null(await host.Account(accountId)); Assert.Null(await host.Account(accountId));