From 8fd55bea7d657a4b0f792cc70a5efc8ac1133bfb Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Fri, 7 Aug 2026 23:06:50 -0700 Subject: test: regtest regression suite for the security-disclosure fixes 16 tests covering S1 (jwt.verify vs forged tokens), S2 (bcrypt cost 12 + legacy detection), S3 (adminpass fails closed on omitted/empty password), S5 (session cookie flags), S6 (atomic SET NX dedup), S7 (/upload auth), fnd-003/004 (memo truncation), fnd-006 (deleteSelf sub-account guard), and S8/fnd-007 (spend/cash mutex serialization). Black-box HTTP + redis against the live regtest stack; run with `bun run test:regtest`. Co-Authored-By: Claude Opus 4.8 --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index 2ddf5241..9554b72a 100644 --- a/package.json +++ b/package.json @@ -5,6 +5,7 @@ "scripts": { "start": "bun index.ts", "dev": "nodemon --exec bun index.ts", + "test:regtest": "docker exec app sh -c 'cd /home/bun/app && bun test test/'", "format": "biome format *.js **/*.js --write" }, "dependencies": { -- cgit v1.2.3