Meta Vens
655fcc7d22
Credential rotate decisions carry a required expiry
...
Refresh and exchange answers now type as ExpiringTokenSet, and a rotate
decision requires tokenExpiresAt, so neither store has a no-expiry rule left
to mutate: a NULL expiry can only be written by a revoke.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 13:29:10 +02:00
..
access-plugin.test.ts
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
app.test.ts
Pin the callback's refusal of a signed state the provider has no role for
2026-10-19 13:27:28 +02:00
browser-adapter.test.ts
Resume browser sign-in by attempt id, not the completion code
2026-09-23 20:50:28 +02:00
caller-identity-attack-soul-r21.test.ts
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
caller-identity-attack-soul.test.ts
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
caller-identity-soul.test.ts
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
capability-rules.test.ts
Make app capability rules data instead of code
2026-09-06 23:58:58 +02:00
config-secrets.test.ts
readSecretInput: never print the path, refuse relative paths and blank secrets
2026-09-30 13:50:53 +02:00
entrypoint-secrets.test.ts
Every start connects to Postgres; pin the signing key's read refusal
2026-09-30 15:30:10 +02:00
idunn-candidate-bind.test.ts
Move the private command port with the candidate
2026-09-06 22:15:34 +02:00
idunn-rudp-health.test.ts
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
managed-credential.test.ts
Credential rotate decisions carry a required expiry
2026-10-19 13:29:10 +02:00
odin-publication.test.ts
Give Heimdall Odin documents unique catalog keys
2026-08-22 03:47:02 +02:00
presence-identity-descriptor.test.ts
Assert descriptor selection instead of reading a live descriptor
2026-09-08 13:52:47 +02:00
private-command-diagnostics.test.ts
Tests: refresh failures surface as the typed ManagedCredentialRefreshFailed; seven providers
2026-10-19 11:20:18 +02:00
process-write-lease.test.ts
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
provider-token-request.test.ts
Token answers: a default lifetime replaces an unknown expiry; a malformed refresh_token is typed
2026-10-19 13:24:21 +02:00
recipe-secrets.test.ts
Recipe test: explore loadConfig as Idunn starts Heimdall
2026-09-30 22:52:40 +02:00
security.test.ts
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
store.test.ts
Refresh managed credentials under a row lock, with typed revocation
2026-10-19 11:11:34 +02:00
verse-runtime.test.ts
Tests: refresh failures surface as the typed ManagedCredentialRefreshFailed; seven providers
2026-10-19 11:20:18 +02:00
verse-witness.test.ts
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00