f89e074dd1
Governed substrate for autonomous agents: scoped identity (passports), audited actions, MCP workspace. Infra IPs and secrets redacted for public release.
49 lines
1.9 KiB
JavaScript
49 lines
1.9 KiB
JavaScript
import { describe, it, expect } from 'vitest';
|
|
import { hashToken, TOKEN_PREFIX_LEN } from '../tokenHash.js';
|
|
|
|
describe('hashToken (ADR-0069)', () => {
|
|
it('returns 12-char prefix + sha256 hex hash for a known input', () => {
|
|
const { prefix, hash } = hashToken('abc123def456ghi789');
|
|
expect(prefix).toBe('abc123def456');
|
|
expect(prefix).toHaveLength(TOKEN_PREFIX_LEN);
|
|
expect(hash).toBe('1fc04aae4c0759fbe7e340318ff300e9e02cb92dfb6198f6468d9b9891f8b149');
|
|
});
|
|
|
|
it('matches a webhook-style token snapshot', () => {
|
|
const { prefix, hash } = hashToken('wh_a1f9b2c3d4e5_token_x');
|
|
expect(prefix).toBe('wh_a1f9b2c3d');
|
|
expect(hash).toBe('ba498f0c8c4fd4178b4e11a51c1c76f0cbf12952bc4d2675f4e209934455fa34');
|
|
});
|
|
|
|
it('handles empty string (sha256 of "")', () => {
|
|
const { prefix, hash } = hashToken('');
|
|
expect(prefix).toBe('');
|
|
expect(hash).toBe('e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855');
|
|
});
|
|
|
|
it('takes the whole string as prefix when shorter than TOKEN_PREFIX_LEN', () => {
|
|
const { prefix } = hashToken('short');
|
|
expect(prefix).toBe('short');
|
|
});
|
|
|
|
it('is deterministic across calls for the same plaintext', () => {
|
|
const a = hashToken('determinism-check');
|
|
const b = hashToken('determinism-check');
|
|
expect(a.prefix).toBe(b.prefix);
|
|
expect(a.hash).toBe(b.hash);
|
|
});
|
|
|
|
it('produces different hashes for inputs that share a prefix', () => {
|
|
const a = hashToken('shared-prefix-AAAA');
|
|
const b = hashToken('shared-prefix-BBBB');
|
|
expect(a.prefix).toBe(b.prefix);
|
|
expect(a.hash).not.toBe(b.hash);
|
|
});
|
|
|
|
it('throws TypeError on non-string input', () => {
|
|
expect(() => hashToken(null)).toThrow(TypeError);
|
|
expect(() => hashToken(undefined)).toThrow(TypeError);
|
|
expect(() => hashToken(123)).toThrow(TypeError);
|
|
expect(() => hashToken({})).toThrow(TypeError);
|
|
});
|
|
});
|