Heimdall
70fd6396f4
Exercise the pending-link and findAuthCompletion store methods in the live-Postgres privilege tests
...
The live suite asserts that exerciseStore calls every PostgresStore method and
that dropping any one table privilege makes it fail with 42501. createPendingLink,
consumePendingLink and findAuthCompletion landed without a call there, so the
coverage assertion failed, and with no operation touching pending_links the
privilege test saw no error when SELECT on it was revoked. Both failures were
invisible because the live files skip without HEIMDALL_TEST_PG_ADMIN_URL.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-05 23:30:23 +00:00
..
fixtures
Heimdall opens its Idunn presence authority once, before it listens
2026-10-23 17:48:08 +02:00
access-plugin.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
app.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
browser-adapter.test.ts
Resume browser sign-in by attempt id, not the completion code
2026-09-23 20:50:28 +02:00
caller-identity-attack-soul-r21.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
caller-identity-attack-soul.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
caller-identity-soul.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
capability-rules.test.ts
Make app capability rules data instead of code
2026-09-06 23:58:58 +02:00
config-secrets.test.ts
readSecretInput: never print the path, refuse relative paths and blank secrets
2026-09-30 13:50:53 +02:00
entrypoint-secrets.test.ts
Every start connects to Postgres; pin the signing key's read refusal
2026-09-30 15:30:10 +02:00
fastify-malformed-url.test.ts
Test: malformed URL must not reach a sibling prefix's not-found handler (GHSA-p68q-wchp-6fh7)
2026-10-22 21:00:46 +02:00
google-link.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
google-oidc.test.ts
Google OIDC provider: link-only, sub-keyed, PKCE and nonce
2026-11-04 16:10:23 +00:00
idunn-boot.test.ts
Boot test: fail on a logged publication fault, and require presence at startup
2026-10-23 17:50:37 +02:00
idunn-candidate-bind.test.ts
Move the private command port with the candidate
2026-09-06 22:15:34 +02:00
idunn-rudp-health.test.ts
Test fixtures: the Rust owner's Idunn runtime records, and one fake Idunn RUDP endpoint
2026-10-23 17:48:02 +02:00
link-binding.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
managed-credential.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
oauth-flow.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
oauth-state-binding.test.ts
Refuse an unbound or replayed state with a page back to the app, and keep use records through the skew
2026-11-05 17:16:38 +00:00
odin-publication.test.ts
Give Heimdall Odin documents unique catalog keys
2026-08-22 03:47:02 +02:00
presence-identity-descriptor.test.ts
Heimdall opens its Idunn presence authority once, before it listens
2026-10-23 17:48:08 +02:00
private-command-diagnostics.test.ts
Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection
2026-11-05 12:46:05 +00:00
process-write-lease.test.ts
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
provider-token-request.test.ts
Pin the year boundary, the typed exchange failure and the start refusal's code
2026-10-19 14:45:35 +02:00
publisher-sequence.test.ts
Presence authority test: the Rust fixture's target is the fixture's own, not heimdall
2026-10-23 17:49:23 +02:00
recipe-secrets.test.ts
Recipe test: explore loadConfig as Idunn starts Heimdall
2026-09-30 22:52:40 +02:00
security.test.ts
Google OIDC provider: link-only, sub-keyed, PKCE and nonce
2026-11-04 16:10:23 +00:00
state-root-generations.test.ts
Generation test: bundle the generation process so a uid that cannot read the checkout can run it
2026-10-23 14:26:13 +02:00
store.test.ts
Exercise the pending-link and findAuthCompletion store methods in the live-Postgres privilege tests
2026-11-05 23:30:23 +00:00
verse-runtime.test.ts
Merge main (link-initiator binding) and reconcile the Google link with it
2026-11-05 10:58:02 +00:00
verse-witness.test.ts
Google OIDC provider: link-only, sub-keyed, PKCE and nonce
2026-11-04 16:10:23 +00:00