Bohdan Triapitsyn
b09614fd68
- add shared owner-only credential storage for OpenCode Go, Ollama Cloud, and Cursor - validate credentials before atomic writes using 0700 directories and 0600 files - replace provider-specific credential routes with an allowlisted lifecycle API - stop automatically reading Ollama's legacy cookie file - stop reading or modifying Cursor's database during regular quota requests - add explicit one-time Cursor credential import without mutating Cursor storage - persist refreshed Cursor credentials only in OpenChamber-managed storage - add Ollama Cloud and Cursor credential controls to provider settings - preserve OpenCode Go tracking through the shared credential flow - add VS Code credential management and Cursor quota parity - reject authentication redirects, enforce request timeouts, and fail on unparseable usage pages - mask stored secrets in API responses and extend quota security coverage - update quota provider documentation
33 lines
1.6 KiB
JavaScript
33 lines
1.6 KiB
JavaScript
import { afterAll, afterEach, describe, expect, it } from 'bun:test';
|
|
import fs from 'node:fs';
|
|
import os from 'node:os';
|
|
import path from 'node:path';
|
|
import { deleteOpenCodeGoCredential, getOpenCodeGoCredentialStatus, readOpenCodeGoCredential, writeOpenCodeGoCredential } from './opencode-go-credentials.js';
|
|
|
|
const previousDataDir = process.env.OPENCHAMBER_DATA_DIR;
|
|
const temporaryDirectory = fs.mkdtempSync(path.join(os.tmpdir(), 'openchamber-go-'));
|
|
process.env.OPENCHAMBER_DATA_DIR = temporaryDirectory;
|
|
|
|
afterEach(() => deleteOpenCodeGoCredential());
|
|
|
|
describe('OpenCode Go credential store', () => {
|
|
it('normalizes, masks, and stores credentials with owner-only permissions', () => {
|
|
const status = writeOpenCodeGoCredential({ workspaceId: ' wrk_test ', authCookie: ' auth=secret ' });
|
|
expect(status).toEqual({ configured: true, workspaceId: 'wrk_test', secretMasked: '••••••••' });
|
|
expect(readOpenCodeGoCredential()).toEqual({ workspaceId: 'wrk_test', authCookie: 'secret' });
|
|
expect(fs.statSync(path.join(temporaryDirectory, 'quota', 'opencode-go.json')).mode & 0o777).toBe(0o600);
|
|
});
|
|
|
|
it('removes credentials without exposing prior values', () => {
|
|
writeOpenCodeGoCredential({ workspaceId: 'wrk_test', authCookie: 'secret' });
|
|
deleteOpenCodeGoCredential();
|
|
expect(getOpenCodeGoCredentialStatus()).toEqual({ configured: false });
|
|
});
|
|
});
|
|
|
|
afterAll(() => {
|
|
if (previousDataDir === undefined) delete process.env.OPENCHAMBER_DATA_DIR;
|
|
else process.env.OPENCHAMBER_DATA_DIR = previousDataDir;
|
|
fs.rmSync(temporaryDirectory, { recursive: true, force: true });
|
|
});
|