pepepper/fluxer
1
0
Fork 0
mirror of https://github.com/fluxerapp/fluxer synced 2026-10-07 19:22:14 +09:00
Code Issues Packages Projects Releases Wiki Activity

test(api): make the harvest token tamper test deterministic (#2894)

Browse Source
This commit is contained in:
Hampus
2026-09-22 02:20:18 +02:00
committed by GitHub
parent a21b9c4659
commit 045dd5d027
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fluxer_api/src/api/user/services/__tests__/HarvestDownloadToken.test.ts
+4 -1
View File
@@ -43,7 +43,10 @@ describe('HarvestDownloadToken', () => {
test('rejects a tampered signature', () => {
const token = signHarvestDownloadToken(payload(), SECRET);
expect(verifyHarvestDownloadToken(`${token.slice(0, -2)}xy`, SECRET)).toBeNull();
const [encoded, signature] = token.split('.');
const tampered = Buffer.from(signature as string, 'base64url');
tampered[0] = (tampered[0] as number) ^ 0x01;
expect(verifyHarvestDownloadToken(`${encoded}.${tampered.toString('base64url')}`, SECRET)).toBeNull();
});
test('rejects malformed input', () => {