Heimdall/tests
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Heimdall 70fd6396f4 Exercise the pending-link and findAuthCompletion store methods in the live-Postgres privilege tests
The live suite asserts that exerciseStore calls every PostgresStore method and
that dropping any one table privilege makes it fail with 42501. createPendingLink,
consumePendingLink and findAuthCompletion landed without a call there, so the
coverage assertion failed, and with no operation touching pending_links the
privilege test saw no error when SELECT on it was revoked. Both failures were
invisible because the live files skip without HEIMDALL_TEST_PG_ADMIN_URL.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-05 23:30:23 +00:00
..
fixtures Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
access-plugin.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
app.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
browser-adapter.test.ts Resume browser sign-in by attempt id, not the completion code 2026-09-23 20:50:28 +02:00
caller-identity-attack-soul-r21.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
caller-identity-attack-soul.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
caller-identity-soul.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
capability-rules.test.ts Make app capability rules data instead of code 2026-09-06 23:58:58 +02:00
config-secrets.test.ts readSecretInput: never print the path, refuse relative paths and blank secrets 2026-09-30 13:50:53 +02:00
entrypoint-secrets.test.ts Every start connects to Postgres; pin the signing key's read refusal 2026-09-30 15:30:10 +02:00
fastify-malformed-url.test.ts Test: malformed URL must not reach a sibling prefix's not-found handler (GHSA-p68q-wchp-6fh7) 2026-10-22 21:00:46 +02:00
google-link.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
google-oidc.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
idunn-boot.test.ts Boot test: fail on a logged publication fault, and require presence at startup 2026-10-23 17:50:37 +02:00
idunn-candidate-bind.test.ts Move the private command port with the candidate 2026-09-06 22:15:34 +02:00
idunn-rudp-health.test.ts Test fixtures: the Rust owner's Idunn runtime records, and one fake Idunn RUDP endpoint 2026-10-23 17:48:02 +02:00
link-binding.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
managed-credential.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
oauth-flow.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
oauth-state-binding.test.ts Refuse an unbound or replayed state with a page back to the app, and keep use records through the skew 2026-11-05 17:16:38 +00:00
odin-publication.test.ts Give Heimdall Odin documents unique catalog keys 2026-08-22 03:47:02 +02:00
presence-identity-descriptor.test.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
private-command-diagnostics.test.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
process-write-lease.test.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
provider-token-request.test.ts Pin the year boundary, the typed exchange failure and the start refusal's code 2026-10-19 14:45:35 +02:00
publisher-sequence.test.ts Presence authority test: the Rust fixture's target is the fixture's own, not heimdall 2026-10-23 17:49:23 +02:00
recipe-secrets.test.ts Recipe test: explore loadConfig as Idunn starts Heimdall 2026-09-30 22:52:40 +02:00
security.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
state-root-generations.test.ts Generation test: bundle the generation process so a uid that cannot read the checkout can run it 2026-10-23 14:26:13 +02:00
store.test.ts Exercise the pending-link and findAuthCompletion store methods in the live-Postgres privilege tests 2026-11-05 23:30:23 +00:00
verse-runtime.test.ts Merge main (link-initiator binding) and reconcile the Google link with it 2026-11-05 10:58:02 +00:00
verse-witness.test.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00