From efb278a910318faac210e4035f3a34bb03d5cd0c Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Sun, 11 Oct 2026 22:57:26 +0200 Subject: [PATCH] Heimdall tests: the no-attempt-field refusal carries a genuine code, so only the missing nonce can refuse it Co-Authored-By: Claude Sonnet 5.5 --- tests/Bifrost.Web.Tests/HeimdallCompletionTests.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/Bifrost.Web.Tests/HeimdallCompletionTests.cs b/tests/Bifrost.Web.Tests/HeimdallCompletionTests.cs index d49061d..778901c 100644 --- a/tests/Bifrost.Web.Tests/HeimdallCompletionTests.cs +++ b/tests/Bifrost.Web.Tests/HeimdallCompletionTests.cs @@ -694,7 +694,7 @@ public sealed class HeimdallCompletionTests "Heimdall completion has no attempt for this browser."), ("bad cookie", await host.CompleteAsync(attempt.Nonce, host.CodeFor(attempt, accountId), Corrupt(attempt.Cookie!)), "Heimdall completion has no attempt for this browser."), - ("no attempt field", await host.CompleteAsync(null, "code", attempt.Cookie), + ("no attempt field", await host.CompleteAsync(null, host.CodeFor(attempt, accountId), attempt.Cookie), "Heimdall completion has no attempt for this browser."), ("malformed attempt", await host.CompleteAsync("short", "code", attempt.Cookie, "bifrost_heimdall_short"), "Heimdall completion has no attempt for this browser."),