Marc-André Bombeck b5bd730ec2 test(auth): tighten native-token hash assertions, isolate hmac env, expand coverage scope (#136) ...

Three small follow-ups to the v1.3.3 audit:

- src/lib/auth/__tests__/hmac.test.ts now stubs API_TOKEN_HMAC_KEY via
  vi.stubEnv per test instead of mutating process.env in beforeAll, so the
  variable is restored cleanly after every case (and worker leaks under
  --no-isolate are gone).
- The two native-token issuance tests (password login + passkey login) now
  mock hashToken as (raw) => "hashed:" + raw and assert the persisted
  tokenHash equals hashToken(plaintext) instead of accepting any string.
  Catches a regression where the route would hash the wrong value.
- vitest.config.mts adopts coverage.include for the full src/ tree (the
  vitest 4 replacement for coverage.all=true) so untouched files surface
  with 0% rather than being silently omitted, and excludes the future
  tests/integration/** suite so unit-test runs stay fast.

No production code touched; suite stays at 454 green.

2026-05-08 13:22:46 +02:00

..

__tests__

test(auth): tighten native-token hash assertions, isolate hmac env, expand coverage scope (#136)

2026-05-08 13:22:46 +02:00

audit.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

hmac.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

issue-token.ts

feat(auth): optional Bearer token issuance on login for headless clients

2026-05-03 21:53:07 +02:00

passkey.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

password.ts

release(v1.2): i18n, thresholds, glucose, dashboard customization, feedback, multi-provider AI (#77)

2026-04-18 22:20:12 +02:00

profile-update.ts

refactor(auth/profile): extract validation/persistence into shared helper

2026-05-03 21:53:11 +02:00

session.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00