GameCult/Heimdall
Watch
9
0
Fork
You've already forked Heimdall
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Heimdall/tests
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Heimdall f2f1dabc06 Blank the consumed refresh token in the fallback marker write 
When the rotation or revocation the provider's answer called for cannot be
committed, the fallback write now clears refresh_token_encrypted as well as
stamping the marker, so the end of the 60 s backoff cannot replay the consumed
token. Tests (live Postgres, trigger-refused revoke) assert no replayable token
and no second provider call. Docs: the marker is a best-effort write on a
second connection after rollback, the skew cap, the blanking write's residual.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-09 10:07:24 +00:00
..
fixtures Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
access-plugin.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
app.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
browser-adapter.test.ts Resume browser sign-in by attempt id, not the completion code 2026-09-23 20:50:28 +02:00
caller-identity-attack-soul-r21.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
caller-identity-attack-soul.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
caller-identity-soul.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
capability-rules.test.ts Make app capability rules data instead of code 2026-09-06 23:58:58 +02:00
config-secrets.test.ts readSecretInput: never print the path, refuse relative paths and blank secrets 2026-09-30 13:50:53 +02:00
consent-drift.test.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
entrypoint-secrets.test.ts Every start connects to Postgres; pin the signing key's read refusal 2026-09-30 15:30:10 +02:00
fastify-malformed-url.test.ts Test: malformed URL must not reach a sibling prefix's not-found handler (GHSA-p68q-wchp-6fh7) 2026-10-22 21:00:46 +02:00
google-link.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
google-oidc.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
idunn-boot.test.ts Boot test: fail on a logged publication fault, and require presence at startup 2026-10-23 17:50:37 +02:00
idunn-candidate-bind.test.ts Move the private command port with the candidate 2026-09-06 22:15:34 +02:00
idunn-rudp-health.test.ts Test fixtures: the Rust owner's Idunn runtime records, and one fake Idunn RUDP endpoint 2026-10-23 17:48:02 +02:00
joystick-consent.test.ts Refusal return contract: pin the fragment, carry the attempt id, document it 2026-11-08 13:50:58 +00:00
link-binding.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
managed-credential.test.ts Blank the consumed refresh token in the fallback marker write 2026-11-09 10:07:24 +00:00
oauth-flow.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
oauth-state-binding.test.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
odin-publication.test.ts Give Heimdall Odin documents unique catalog keys 2026-08-22 03:47:02 +02:00
presence-identity-descriptor.test.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
private-command-diagnostics.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
process-write-lease.test.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
provider-token-request.test.ts Pin the year boundary, the typed exchange failure and the start refusal's code 2026-10-19 14:45:35 +02:00
publisher-sequence.test.ts Presence authority test: the Rust fixture's target is the fixture's own, not heimdall 2026-10-23 17:49:23 +02:00
recipe-secrets.test.ts Recipe test: explore loadConfig as Idunn starts Heimdall 2026-09-30 22:52:40 +02:00
security.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
state-root-generations.test.ts Generation test: bundle the generation process so a uid that cannot read the checkout can run it 2026-10-23 14:26:13 +02:00
store.test.ts Count the new linked_identities column in the schema inventory test 2026-11-08 21:40:39 +00:00
verse-runtime.test.ts Merge main (link-initiator binding) and reconcile the Google link with it 2026-11-05 10:58:02 +00:00
verse-witness.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00