26 lines
931 B
TypeScript
26 lines
931 B
TypeScript
// @vitest-environment node
|
|
import { describe, expect, test } from "vitest";
|
|
import { readRepoFile } from "~/utils/testing/repoPaths";
|
|
|
|
function readAdminDataSource() {
|
|
return readRepoFile("apps/web/app/utils/data/.server/adminData.ts");
|
|
}
|
|
|
|
describe("admin data Authentik MFA assurance boundary", () => {
|
|
test("does not import MFA secret or recovery-code storage directly", () => {
|
|
const source = readAdminDataSource();
|
|
|
|
expect(source).not.toMatch(/mfaRecoveryCode|totpSecret|encryptedTotpSecret/i);
|
|
});
|
|
|
|
test("accepts only a validated tenantless AdminSession", () => {
|
|
const source = readAdminDataSource();
|
|
|
|
expect(source).toContain("getValidatedServerSession");
|
|
expect(source).toContain('"adminUser" in validatedSession');
|
|
expect(source).toContain("validatedSession.adminUser");
|
|
expect(source).not.toContain("getUserTotpStatus");
|
|
expect(source).not.toContain("enforceAdminMfa");
|
|
});
|
|
});
|