0be354a920
Single-commit clean baseline after security scrub of niche-tells, project codenames, internal jargon, and contributor-email leaks. Contents: - 100 Rust crates (_primitives/_rust/) - 37 agent manifests (_manifests/) + generated specs (_generated/) - 67 user-invocable skills (skills/) - 33 hooks (hooks/) - Composition blocks (_blocks/) - Documentation (docs/, README.md) - TS adapter packages (_ts_packages/) - Assembler (_assembler/) - Roles (_roles/) - Templates (_templates/) - Forgejo CI (.forgejo/) Author: Denis Parfionovich <info@greendragon.info> License: see LICENSE.
30 lines
1.1 KiB
TypeScript
30 lines
1.1 KiB
TypeScript
import { describe, it, expect } from "vitest";
|
|
import { McpServer } from "../src/server.js";
|
|
|
|
describe("server auth", () => {
|
|
it("rejects calls without a token when auth is enabled", async () => {
|
|
const srv = new McpServer({ rustBinDir: "/tmp/stub", authToken: "secret" });
|
|
const resp = await srv.handle({ tool: "kei-ledger", args: { args: {} } });
|
|
expect(resp.ok).toBe(false);
|
|
expect(resp.error?.code).toBe(-32001);
|
|
});
|
|
|
|
it("rejects calls with a wrong token", async () => {
|
|
const srv = new McpServer({ rustBinDir: "/tmp/stub", authToken: "secret" });
|
|
const resp = await srv.handle({
|
|
tool: "kei-ledger",
|
|
args: { args: {} },
|
|
authHeader: "wrong",
|
|
});
|
|
expect(resp.ok).toBe(false);
|
|
expect(resp.error?.code).toBe(-32001);
|
|
});
|
|
|
|
it("allows calls when auth is disabled (stdio mode)", async () => {
|
|
const srv = new McpServer({ rustBinDir: "/tmp/stub" });
|
|
const resp = await srv.handle({ tool: "does-not-exist", args: {} });
|
|
// auth passes → fails on tool lookup instead
|
|
expect(resp.ok).toBe(false);
|
|
expect(resp.error?.code).toBe(-32601);
|
|
});
|
|
});
|