tcmts.atproto.test

Tests

testAnswersAreCapped () => Promise<void>

An answer is read only up to its cap: one that says it's longer, or is, is refused.

testAppPasswordsSignInWithoutABrowser () => Promise<void>

With an app password in `TCM_ATPROTO_APP_PASSWORD`, a sign-in needs no browser and covers any scope; it's kept with the password, so later sign-ins, for any scope and with no password given, need nothing, and when its tokens are gone it signs in again by itself. A wrong password is refused, and nothing kept.

testBrowserCommandsKeepTheUrlWhole () => void

Windows' cmd gets a URL with `&` in it whole; another's is passed as it is.

testDpopProofsVerify () => void

testKeptSignInsAreTheUsersAlone () => void

Kept sign-ins are read only from the user's own file: not a link (refused), and not one others can read (made private); they're written without following a link left in the way.

testLoopbackTakesOnlyItsOwnAnswer () => Promise<void>

The loopback server takes only its own sign-in's answer: anything else is turned away, and it goes on waiting.

testOAuthAnswersAreThisSignInsAndSayTheirIssuer () => void

A sign-in's answer must be this sign-in's (its state), and say who it's from (its issuer).

testOnlyPublicHttpsUrlsAreFetched () => Promise<void>

testPdsEndpointsAreOrigins () => void

testPrivateAddresses () => void

testRefreshesNameTheirAccount () => Promise<void>

A refreshed token is taken only if the answer names the account it's for.

testUncompressedKeysAreCompressed () => void