cofacts / rumors-api / 25278710249

82%

master: 82%

Build Type

Pull #386

github

Committed by nonumpa

Commit Message

test(auth): update BFF tests for session isolation; add provider route coverage

- loginRouter tests now assert ctx.state.bffInfo (not ctx.session.redirectTo)
  and verify ctx.session is not touched for BFF flow.
- authRouter tests drive BFF flow via query.state (encoded BFF state) and
  user.id, replacing the old session.redirectTo / user.userId approach.
- 'clears session fields' test replaced with 'does not mutate legacy session
  fields during BFF redirect', asserting full isolation.
- New describe block: assert facebook/github/google provider routes pass the
  encoded composite state to passport.authenticate() when ctx.state.bffInfo
  is set, and omit state option in the legacy flow.

Pull Request Pull Request #386: feat(auth): Custom Authorization Code Flow with RS256 JWT + JWKS

Coverage Stats

891 of 1161 branches covered (76.74%)

Branch coverage included in aggregate %.

123 of 132 new or added lines in 7 files covered. (93.18%)

10 existing lines in 1 file now uncovered.

1732 of 2029 relevant lines covered (85.36%)

17.2 hits per line