diff options
| author | Adam Soltys <[email protected]> | 2026-08-07 23:06:50 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-08-07 23:29:27 -0700 |
| commit | 8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb (patch) | |
| tree | c3bba9a916eae755eea371fbdf62ec1d6d04fb68 /package.json | |
| parent | 28e93331a16c962572a3ce55aee3f9b22a1cc74e (diff) | |
| download | coinos-server-8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb.tar.gz coinos-server-8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb.zip | |
test: regtest regression suite for the security-disclosure fixes
16 tests covering S1 (jwt.verify vs forged tokens), S2 (bcrypt cost 12 +
legacy detection), S3 (adminpass fails closed on omitted/empty password),
S5 (session cookie flags), S6 (atomic SET NX dedup), S7 (/upload auth),
fnd-003/004 (memo truncation), fnd-006 (deleteSelf sub-account guard),
and S8/fnd-007 (spend/cash mutex serialization). Black-box HTTP + redis
against the live regtest stack; run with `bun run test:regtest`.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
Diffstat (limited to 'package.json')
| -rw-r--r-- | package.json | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/package.json b/package.json index 2ddf5241..9554b72a 100644 --- a/package.json +++ b/package.json @@ -5,6 +5,7 @@ "scripts": { "start": "bun index.ts", "dev": "nodemon --exec bun index.ts", + "test:regtest": "docker exec app sh -c 'cd /home/bun/app && bun test test/'", "format": "biome format *.js **/*.js --write" }, "dependencies": { |