tcmts.atproto.test

Tests

testAnswersAreCapped () => Promise<void>

An answer is read only up to its cap: one that says it's longer, or is, is refused.

testBrowserCommandsKeepTheUrlWhole () => void

Windows' cmd gets a URL with `&` in it whole; another's is passed as it is.

testDpopProofsVerify () => void

testKeptSignInsAreTheUsersAlone () => void

Kept sign-ins are read only from the user's own file: not a link (refused), and not one others can read (made private); they're written without following a link left in the way.

testLoopbackTakesOnlyItsOwnAnswer () => Promise<void>

The loopback server takes only its own sign-in's answer: anything else is turned away, and it goes on waiting.

testOAuthAnswersAreThisSignInsAndSayTheirIssuer () => void

A sign-in's answer must be this sign-in's (its state), and say who it's from (its issuer).

testOnlyPublicHttpsUrlsAreFetched () => Promise<void>

testPdsEndpointsAreOrigins () => void

testPrivateAddresses () => void

testRefreshesNameTheirAccount () => Promise<void>

A refreshed token is taken only if the answer names the account it's for.

testUncompressedKeysAreCompressed () => void