GameCult/Heimdall
Watch
9
0
Fork
You've already forked Heimdall
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Heimdall/tests
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Heimdall 4fe367ac8d Identity mover: POST /v1/apps/:slug/identity-moves, proof of both accounts, strict-passkey coverage, alias row, credential strip (#16) 
Soul s3 clean at 2f1b733. Needs identity_moves DDL + GRANT SELECT, INSERT before the build starts.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-14 01:59:11 +00:00
..
fixtures Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
access-plugin.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
app.test.ts Connect start: pin the app-secret gate on every managed provider, refuse blank targets (#9) 2026-11-09 12:18:26 +00:00
browser-adapter.test.ts Resume browser sign-in by attempt id, not the completion code 2026-09-23 20:50:28 +02:00
caller-identity-attack-soul-r21.test.ts Opt-in sign_in step-up: app-authenticated, signed-state flag, provider re-auth parameters, typed refusal 2026-11-12 23:10:27 +00:00
caller-identity-attack-soul.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
caller-identity-soul.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
capability-rules.test.ts Make app capability rules data instead of code 2026-09-06 23:58:58 +02:00
config-secrets.test.ts readSecretInput: never print the path, refuse relative paths and blank secrets 2026-09-30 13:50:53 +02:00
consent-drift.test.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
entrypoint-secrets.test.ts Every start connects to Postgres; pin the signing key's read refusal 2026-09-30 15:30:10 +02:00
fastify-malformed-url.test.ts Test: malformed URL must not reach a sibling prefix's not-found handler (GHSA-p68q-wchp-6fh7) 2026-10-22 21:00:46 +02:00
google-link.test.ts Member identity list and step-up-gated unlink: step_up_at on a step-up sign-in's access claim, GET /v1/me/identities, POST /v1/me/identities/:id/unlink 2026-11-13 18:59:21 +00:00
google-oidc.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
identity-moves.test.ts Identity mover: POST /v1/apps/:slug/identity-moves, proof of both accounts, strict-passkey coverage, alias row, credential strip (#16) 2026-11-14 01:59:11 +00:00
identity-unlink.test.ts App-asserted step-up: POST /v1/apps/{app}/step-up mints a same-session access token with step_up_at and step_up_method 2026-11-13 19:59:26 +00:00
idunn-boot.test.ts Boot test: fail on a logged publication fault, and require presence at startup 2026-10-23 17:50:37 +02:00
idunn-candidate-bind.test.ts Move the private command port with the candidate 2026-09-06 22:15:34 +02:00
idunn-rudp-health.test.ts Test fixtures: the Rust owner's Idunn runtime records, and one fake Idunn RUDP endpoint 2026-10-23 17:48:02 +02:00
joystick-consent.test.ts Consent bomb test: pin the inflate output cap, not a wall-clock bound 2026-11-13 07:03:30 +00:00
link-binding.test.ts Member identity list and step-up-gated unlink: step_up_at on a step-up sign-in's access claim, GET /v1/me/identities, POST /v1/me/identities/:id/unlink 2026-11-13 18:59:21 +00:00
managed-credential.test.ts Tests: rotate fixtures carry consumedRefreshToken 2026-11-09 10:27:35 +00:00
oauth-flow.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
oauth-state-binding.test.ts Prune oauth_state_uses on claim: bounded delete past exp + skew + margin (#12) 2026-11-13 05:58:45 +00:00
odin-publication.test.ts Give Heimdall Odin documents unique catalog keys 2026-08-22 03:47:02 +02:00
presence-identity-descriptor.test.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
private-command-diagnostics.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
process-write-lease.test.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
provider-token-request.test.ts Pin the year boundary, the typed exchange failure and the start refusal's code 2026-10-19 14:45:35 +02:00
publisher-sequence.test.ts Presence authority test: the Rust fixture's target is the fixture's own, not heimdall 2026-10-23 17:49:23 +02:00
recipe-secrets.test.ts Recipe test: explore loadConfig as Idunn starts Heimdall 2026-09-30 22:52:40 +02:00
security.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
state-root-generations.test.ts Generation test: bundle the generation process so a uid that cannot read the checkout can run it 2026-10-23 14:26:13 +02:00
step-up-assertion.test.ts Step-up assertion: pin per-app not-permitted budget and the 10.5 min prune horizon, name the tripped budget in the audit row, correct validation-order and audit docs 2026-11-13 20:19:41 +00:00
step-up.test.ts Member identity list and step-up-gated unlink: step_up_at on a step-up sign-in's access claim, GET /v1/me/identities, POST /v1/me/identities/:id/unlink 2026-11-13 18:59:21 +00:00
store.test.ts Identity mover: POST /v1/apps/:slug/identity-moves, proof of both accounts, strict-passkey coverage, alias row, credential strip (#16) 2026-11-14 01:59:11 +00:00
verse-runtime.test.ts Merge main (link-initiator binding) and reconcile the Google link with it 2026-11-05 10:58:02 +00:00
verse-witness.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00