File size: 2,614 Bytes
d197cf3 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 | // Codex CI auth script tests cover generated auth fixture files.
import fs from "node:fs/promises";
import path from "node:path";
import { describe, expect, it } from "vitest";
import { patchCodexAuthForCi, prepareCodexCiAuth } from "../../scripts/prepare-codex-ci-auth.ts";
import { withTempDir } from "../test-utils/temp-dir.js";
function encodeJwt(payload: Record<string, unknown>): string {
return [
Buffer.from(JSON.stringify({ alg: "none" }), "utf-8").toString("base64url"),
Buffer.from(JSON.stringify(payload), "utf-8").toString("base64url"),
"",
].join(".");
}
function decodeJwtPayload(token: string): Record<string, unknown> {
const payload = token.split(".")[1];
if (!payload) {
throw new Error("missing payload");
}
return JSON.parse(Buffer.from(payload, "base64url").toString("utf-8")) as Record<string, unknown>;
}
describe("prepare-codex-ci-auth", () => {
it("copies tokens.account_id into id_token chatgpt_account_id", () => {
const idToken = encodeJwt({ email: "peter@example.com" });
const result = patchCodexAuthForCi({
tokens: {
account_id: "acct_123",
id_token: idToken,
},
});
expect(result.changed).toBe(true);
const payload = decodeJwtPayload(String(result.auth.tokens?.id_token));
expect(payload.email).toBe("peter@example.com");
expect(payload.chatgpt_account_id).toBe("acct_123");
});
it("leaves current auth metadata unchanged", () => {
const idToken = encodeJwt({ chatgpt_account_id: "acct_existing" });
expect(
patchCodexAuthForCi({
tokens: {
account_id: "acct_123",
id_token: idToken,
},
}),
).toEqual({
auth: {
tokens: {
account_id: "acct_123",
id_token: idToken,
},
},
changed: false,
});
});
it("writes only the staged auth file", async () => {
await withTempDir("codex-ci-auth-", async (tempDir) => {
const authPath = path.join(tempDir, "auth.json");
await fs.writeFile(
authPath,
JSON.stringify({
tokens: {
account_id: "acct_123",
id_token: encodeJwt({ sub: "user" }),
},
}),
);
await expect(prepareCodexCiAuth(authPath)).resolves.toBe(true);
const updated = JSON.parse(await fs.readFile(authPath, "utf-8")) as {
tokens?: { id_token?: string };
};
const payload = decodeJwtPayload(String(updated.tokens?.id_token));
expect(payload.sub).toBe("user");
expect(payload.chatgpt_account_id).toBe("acct_123");
});
});
});
|