From 48970243240cbe27a539dc711fe37fdd520a9f59 Mon Sep 17 00:00:00 2001 From: LukeGus Date: Sun, 27 Sep 2026 00:50:14 -0500 Subject: [PATCH] fix: make link-store secret check immune to random base64 matches --- src/backend/tests/sync/client/link-store.test.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/backend/tests/sync/client/link-store.test.ts b/src/backend/tests/sync/client/link-store.test.ts index bdbbe0b00..b6acd908f 100644 --- a/src/backend/tests/sync/client/link-store.test.ts +++ b/src/backend/tests/sync/client/link-store.test.ts @@ -44,7 +44,7 @@ describe("the desktop's link", () => { userId: "local", serverUrl: "https://termix.example", sessionToken: "session-token", - customHeaders: [{ name: "CF-Access-Client-Secret", value: "shh" }], + customHeaders: [{ name: "CF-Access-Client-Secret", value: "shh-secret" }], basicAuth: { username: "gate", password: "pw" }, }); @@ -53,13 +53,13 @@ describe("the desktop's link", () => { ); for (const value of Object.values(raw)) { expect(value).toMatch(/^sysenc:v1:/); - expect(value).not.toContain("shh"); + expect(value).not.toContain("shh-secret"); } const link = await getLink(); expect(link).toMatchObject({ sessionToken: "session-token", - customHeaders: [{ name: "CF-Access-Client-Secret", value: "shh" }], + customHeaders: [{ name: "CF-Access-Client-Secret", value: "shh-secret" }], basicAuth: { username: "gate", password: "pw" }, cursor: 0, knownTypes: [],