mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-10-09 04:12:09 -04:00
André Duffeck
10b93edded
Replace AUTH_GUEST_SESSION_JWT_SECRET with a key derived via HMAC-SHA256 from the reva JWT secret. Guest session tokens and reva access tokens remain unforgeable across each other without a second secret to configure.
35 lines
724 B
Go
35 lines
724 B
Go
// Copyright 2026 OpenCloud GmbH <mail@opencloud.eu>
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package parser
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/opencloud-eu/opencloud/services/auth-guest/pkg/config"
|
|
)
|
|
|
|
func TestValidate(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
jwtSecret string
|
|
wantErr bool
|
|
}{
|
|
{name: "jwt secret set", jwtSecret: "reva-secret"},
|
|
{name: "missing jwt secret", wantErr: true},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
cfg := &config.Config{
|
|
TokenManager: &config.TokenManager{JWTSecret: tt.jwtSecret},
|
|
}
|
|
|
|
err := Validate(cfg)
|
|
if (err != nil) != tt.wantErr {
|
|
t.Fatalf("Validate() error = %v, wantErr %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|