astral/buzz-sheet
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat : update

Browse Source
This commit is contained in:
gunshiz
2026-10-03 00:56:31 +07:00 Unverified
parent f71c00d2ab
commit f23b69a280
36 changed files with 766 additions and 376 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/security-boundaries.test.ts
+14 -11
View File
@@ -44,22 +44,25 @@ describe("administrative security boundaries", () => {
expect(source).toContain('endpoints: ["/sign-in/email", "/sign-up/email"]');
});
it("requires a Turnstile token before submitting administrator login outside development", async () => {
it("requires a Turnstile token before submitting account login outside development", async () => {
const source = await readFile(
new URL("../components/admin/login-card.tsx", import.meta.url),
new URL("../components/auth/account-form.tsx", import.meta.url),
"utf8",
);
expect(source).toContain('const turnstileEnabled = process.env.NODE_ENV !== "development";');
const tokenGuard = "if (turnstileEnabled && !turnstileToken) return;";
expect(source).toContain(tokenGuard);
expect(source.indexOf(tokenGuard)).toBeLessThan(
expect(source).toContain('const captcha = process.env.NODE_ENV !== "development";');
const loginGuard = "if (busy || (!register && captcha && !token)) return;";
const registrationGuard = "if (!form?.reportValidity() || (captcha && !token)) return;";
expect(source).toContain(loginGuard);
expect(source).toContain(registrationGuard);
expect(source.indexOf(loginGuard)).toBeLessThan(
source.indexOf("await authClient.signIn.email("),
);
expect(source).toMatch(
/headers:\s*turnstileEnabled && turnstileToken\s*\?\s*\{ "x-captcha-response": turnstileToken \}\s*:\s*undefined/u,
expect(source.indexOf(registrationGuard)).toBeLessThan(
source.indexOf("await authClient.signUp.email("),
);
expect(source).toContain("disabled={loading || (turnstileEnabled && !turnstileToken)}");
expect(source).toContain('"expired-callback": () => setTurnstileToken(null)');
expect(source).toContain("resetTurnstile();");
expect(source).toContain('"x-captcha-response": token');
expect(source).toContain("disabled={busy || (captcha && !token && !pendingEmail)}");
expect(source).toContain('"expired-callback": () => setToken("")');
expect(source).toContain("window.turnstile?.reset(widget.current)");
});
});