37 lines
1.1 KiB
Python
37 lines
1.1 KiB
Python
|
"""Unit test hashing token — murni, tanpa DB."""
|
||
|
|
|
||
|
|
from services.token_hashing import hash_token, pepper_set
|
||
|
|
|
||
|
|
|
||
|
|
def test_hash_deterministic(monkeypatch):
|
||
|
|
monkeypatch.setenv("TOKEN_PEPPER", "pepper-uji")
|
||
|
|
assert hash_token("ABC123") == hash_token("ABC123")
|
||
|
|
assert len(hash_token("ABC123")) == 64 # sha256 hex
|
||
|
|
|
||
|
|
|
||
|
|
def test_hash_differs_by_pepper(monkeypatch):
|
||
|
|
monkeypatch.setenv("TOKEN_PEPPER", "pepper-a")
|
||
|
|
a = hash_token("SAMA")
|
||
|
|
monkeypatch.setenv("TOKEN_PEPPER", "pepper-b")
|
||
|
|
b = hash_token("SAMA")
|
||
|
|
assert a != b
|
||
|
|
|
||
|
|
|
||
|
|
def test_hash_not_plaintext(monkeypatch):
|
||
|
|
monkeypatch.setenv("TOKEN_PEPPER", "pepper-uji")
|
||
|
|
assert "ABC123" not in hash_token("ABC123")
|
||
|
|
|
||
|
|
|
||
|
|
def test_explicit_pepper_overrides_env(monkeypatch):
|
||
|
|
monkeypatch.setenv("TOKEN_PEPPER", "env-pepper")
|
||
|
|
explicit = hash_token("X", pepper="eksplisit")
|
||
|
|
assert explicit == hash_token("X", pepper="eksplisit")
|
||
|
|
assert explicit != hash_token("X")
|
||
|
|
|
||
|
|
|
||
|
|
def test_pepper_set_flag(monkeypatch):
|
||
|
|
monkeypatch.delenv("TOKEN_PEPPER", raising=False)
|
||
|
|
assert pepper_set() is False
|
||
|
|
monkeypatch.setenv("TOKEN_PEPPER", "ada")
|
||
|
|
assert pepper_set() is True
|