Files
HealthLog/src/__tests__/guardian-notification-payloads.test.ts
T
Marc-André Bombeck 60b4845fea feat(02-11): secure guardian notification delivery
- Remove record-mutating affordances from Guardian channel payloads\n- Reject managed Telegram callbacks and verify channel attribution
2026-08-06 05:44:41 +02:00

22 lines
587 B
TypeScript

import { describe, expect, it } from "vitest";
import { isManagedGuardianDelivery } from "@/lib/notifications/managed-delivery";
describe("managed Guardian notification payload safety", () => {
it("recognises only cross-account record delivery as managed Guardian delivery", () => {
expect(
isManagedGuardianDelivery({
recordUserId: "record-1",
recipientUserId: "guardian-1",
}),
).toBe(true);
expect(
isManagedGuardianDelivery({
recordUserId: "user-1",
recipientUserId: "user-1",
}),
).toBe(false);
});
});