starred/webmail
1
0
Fork 0
mirror of https://github.com/bulwarkmail/webmail.git synced 2026-11-01 00:13:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

test: bound the impersonation expiry by both ends of the handoff

Browse Source
This commit is contained in:
Linus Rath
2026-10-24 17:56:38 +02:00
parent 6d459674f8
commit 0d4631c5a8
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/__tests__/impersonation-session.test.ts
+6 -3
View File
@@ -128,9 +128,12 @@ describe('impersonation handoff', () => {
expect(method).toBe('x:AppPassword/set');
expect(args.accountId).toBe('acc-alice');
expect(args.create.imp.expiresAt).toMatch(/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\dZ$/);
const ttl = Date.parse(args.create.imp.expiresAt) - before;
expect(ttl).toBeGreaterThan(7 * 3600_000);
expect(ttl).toBeLessThanOrEqual(8 * 3600_000);
// The handoff reads the clock after `before` was taken, so bound the
// expiry by both ends instead of measuring from `before` alone.
const after = Date.now();
const expires = Date.parse(args.create.imp.expiresAt);
expect(expires - before).toBeGreaterThan(7 * 3600_000);
expect(expires).toBeLessThanOrEqual(after + 8 * 3600_000);
});
it('refuses the handoff when Stalwart does not create the app password', async () => {