cjw/Oxicloud
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(opaque): add change password

Browse Source
This commit is contained in:
Edouard Vanbelle
2026-07-28 00:18:53 +02:00
parent 94c6121f3b
commit bd8384c9b5
6 changed files with 223 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/infrastructure/repositories/pg/opaque_pg_repository.rs
+23 -23
View File
@@ -468,41 +468,41 @@ mod integration_tests {
#[tokio::test]
async fn mark_migrated_stamps_once_and_is_idempotent() {
let repo = test_repo().await;
let user =
seed_user(&repo, &format!("opaque-mig-{}@example.invalid", Uuid::new_v4())).await;
let user = seed_user(
&repo,
&format!("opaque-mig-{}@example.invalid", Uuid::new_v4()),
)
.await;
// Read the initial NULL state
let initial: (Option<chrono::DateTime<chrono::Utc>>,) = sqlx::query_as(
"SELECT opaque_migrated_at FROM auth.users WHERE id = $1",
)
.bind(user)
.fetch_one(repo.pool())
.await
.unwrap();
let initial: (Option<chrono::DateTime<chrono::Utc>>,) =
sqlx::query_as("SELECT opaque_migrated_at FROM auth.users WHERE id = $1")
.bind(user)
.fetch_one(repo.pool())
.await
.unwrap();
assert!(
initial.0.is_none(),
"new user starts with no opaque_migrated_at"
);
repo.mark_migrated(user).await.expect("first mark");
let first: (Option<chrono::DateTime<chrono::Utc>>,) = sqlx::query_as(
"SELECT opaque_migrated_at FROM auth.users WHERE id = $1",
)
.bind(user)
.fetch_one(repo.pool())
.await
.unwrap();
let first: (Option<chrono::DateTime<chrono::Utc>>,) =
sqlx::query_as("SELECT opaque_migrated_at FROM auth.users WHERE id = $1")
.bind(user)
.fetch_one(repo.pool())
.await
.unwrap();
let first_ts = first.0.expect("timestamp set after first mark");
tokio::time::sleep(std::time::Duration::from_millis(50)).await;
repo.mark_migrated(user).await.expect("second mark");
let second: (Option<chrono::DateTime<chrono::Utc>>,) = sqlx::query_as(
"SELECT opaque_migrated_at FROM auth.users WHERE id = $1",
)
.bind(user)
.fetch_one(repo.pool())
.await
.unwrap();
let second: (Option<chrono::DateTime<chrono::Utc>>,) =
sqlx::query_as("SELECT opaque_migrated_at FROM auth.users WHERE id = $1")
.bind(user)
.fetch_one(repo.pool())
.await
.unwrap();
assert_eq!(
second.0.unwrap(),
first_ts,
src/infrastructure/services/opaque_login_exchange.rs
+8 -2
View File
@@ -256,7 +256,10 @@ mod tests {
let id = cache.store(state, Some(Uuid::new_v4()));
// Second call after take must miss — single-use semantic.
let taken = cache.take(id).expect("first take retrieves the state");
assert!(taken.user_id.is_some(), "user_id round-trips through the stash");
assert!(
taken.user_id.is_some(),
"user_id round-trips through the stash"
);
assert!(
cache.take(id).is_none(),
"second take must miss — exchange_id is single-use"
@@ -306,6 +309,9 @@ mod tests {
let cache = OpaqueLoginExchange::new();
let id = cache.store(build_server_login_state(), None);
let taken = cache.take(id).expect("take dummy stash");
assert!(taken.user_id.is_none(), "dummy-branch stash carries no user_id");
assert!(
taken.user_id.is_none(),
"dummy-branch stash carries no user_id"
);
}
}