public/simple-object-server
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update testing/test_hash_token.sh
All checks were successful
Build-Test-Publish / build (linux/amd64) (push) Successful in 29s
Details
Build-Test-Publish / build (linux/arm64) (push) Successful in 35s
Details
Build-Test-Publish / create-manifest (push) Successful in 14s
Details

Browse Source
This commit is contained in:
j842
2025-08-17 14:55:07 +12:00
parent 7d3ae94eb9
commit a70dce2e75
1 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
testing/test_hash_token.sh
View File

@@ -134,20 +134,21 @@ echo "Generated hash for authentication: ${AUTH_HASH:0:20}..."
if [[ $AUTH_HASH == \$2b\$* ]] && [ ${#AUTH_HASH} -ge 59 ]; then if [[ $AUTH_HASH == \$2b\$* ]] && [ ${#AUTH_HASH} -ge 59 ]; then
echo "✓ Generated hash is valid for use in authentication config" echo "✓ Generated hash is valid for use in authentication config"
# Test that we can verify the token against the hash using hash_token # Generate another hash for the same token to verify it's different (bcrypt salt)
if [ "$IN_CONTAINER" = true ]; then if [ "$IN_CONTAINER" = true ]; then
# Create a test to verify the token matches the hash AUTH_HASH2=$(/sos/hash_token --quiet "$AUTH_TOKEN" 2>/dev/null)
echo "$AUTH_TOKEN" | /sos/hash_token --verify --quiet 2>/dev/null <<< "$AUTH_HASH" && VERIFY_RESULT="VALID" || VERIFY_RESULT="INVALID"
else else
# For outside container, verification is more complex, skip for now AUTH_HASH2=$(docker exec sos-test /sos/hash_token --quiet "$AUTH_TOKEN" 2>/dev/null)
VERIFY_RESULT="SKIPPED"
fi fi
if [ "$VERIFY_RESULT" = "VALID" ] || [ "$VERIFY_RESULT" = "SKIPPED" ]; then if [ "$AUTH_HASH" != "$AUTH_HASH2" ]; then
echo "✓ Hash verification works correctly" echo "✓ Different hashes generated for same token (proper salting)"
else else
echo "Note: Hash verification test skipped in container environment" echo "Warning: Same hash generated for same token (salting issue?)"
fi fi
# Note: The --verify mode requires TTY for password input, which isn't available in test environment
echo "Note: Verification test skipped (requires interactive TTY)"
else else
echo "Warning: Generated hash may not be suitable for authentication" echo "Warning: Generated hash may not be suitable for authentication"
fi fi