@proteinjs/user-server 1.22.0 → 1.22.2

package/dist/test/MalformedResetTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MalformedResetTokens.d.ts","sourceRoot":"","sources":["../../test/MalformedResetTokens.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAiBlG;CACH"}

package/dist/test/MalformedResetTokens.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MalformedResetTokens = void 0;
+/**
+ * The `token` field of a request that does not carry a well-formed reset token: every type a
+ * parsed body or query string can deliver, and every near-miss of the token's shape. The
+ * near-misses are cut from a LIVE token, so a shape check that loosens (a lost anchor, a wider
+ * length, a case-insensitive class, a missing type check) would be looking up something derived
+ * from a real credential — and the suites that use this table assert that no lookup is built.
+ */
+var MalformedResetTokens = /** @class */ (function () {
+    function MalformedResetTokens() {
+    }
+    MalformedResetTokens.CASES = [
+        ['absent', function () { return ({}); }],
+        ['undefined', function () { return ({ token: undefined }); }],
+        ['null', function () { return ({ token: null }); }],
+        ['empty', function () { return ({ token: '' }); }],
+        ['a string of another shape', function () { return ({ token: 'tok-valid-1' }); }],
+        ['a number', function () { return ({ token: 123 }); }],
+        ['true', function () { return ({ token: true }); }],
+        ['an array', function () { return ({ token: ['a', 'b'] }); }],
+        ['an array holding the live token', function (liveToken) { return ({ token: [liveToken] }); }],
+        ['an object', function () { return ({ token: { passwordResetToken: null } }); }],
+        ['63 hex characters of the live token', function (liveToken) { return ({ token: liveToken.slice(0, 63) }); }],
+        ['the live token and one more hex character', function (liveToken) { return ({ token: "".concat(liveToken, "a") }); }],
+        ['the live token in uppercase hex', function (liveToken) { return ({ token: liveToken.toUpperCase() }); }],
+        ['the live token and a trailing newline', function (liveToken) { return ({ token: "".concat(liveToken, "\n") }); }],
+        ['the live token after a leading space', function (liveToken) { return ({ token: " ".concat(liveToken) }); }],
+        ['64 characters that are not hex', function () { return ({ token: 'g'.repeat(64) }); }],
+    ];
+    return MalformedResetTokens;
+}());
+exports.MalformedResetTokens = MalformedResetTokens;
+//# sourceMappingURL=MalformedResetTokens.js.map

package/dist/test/MalformedResetTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MalformedResetTokens.js","sourceRoot":"","sources":["../../test/MalformedResetTokens.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACH;IAAA;IAmBA,CAAC;IAlBiB,0BAAK,GAAkF;QACrG,CAAC,QAAQ,EAAE,cAAM,OAAA,CAAC,EAAE,CAAC,EAAJ,CAAI,CAAC;QACtB,CAAC,WAAW,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAtB,CAAsB,CAAC;QAC3C,CAAC,MAAM,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAjB,CAAiB,CAAC;QACjC,CAAC,OAAO,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAf,CAAe,CAAC;QAChC,CAAC,2BAA2B,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAA1B,CAA0B,CAAC;QAC/D,CAAC,UAAU,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAhB,CAAgB,CAAC;QACpC,CAAC,MAAM,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAjB,CAAiB,CAAC;QACjC,CAAC,UAAU,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAAvB,CAAuB,CAAC;QAC3C,CAAC,iCAAiC,EAAE,UAAC,SAAS,IAAK,OAAA,CAAC,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAxB,CAAwB,CAAC;QAC5E,CAAC,WAAW,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC,EAAzC,CAAyC,CAAC;QAC9D,CAAC,qCAAqC,EAAE,UAAC,SAAS,IAAK,OAAA,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAnC,CAAmC,CAAC;QAC3F,CAAC,2CAA2C,EAAE,UAAC,SAAS,IAAK,OAAA,CAAC,EAAE,KAAK,EAAE,UAAG,SAAS,MAAG,EAAE,CAAC,EAA5B,CAA4B,CAAC;QAC1F,CAAC,iCAAiC,EAAE,UAAC,SAAS,IAAK,OAAA,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,EAApC,CAAoC,CAAC;QACxF,CAAC,uCAAuC,EAAE,UAAC,SAAS,IAAK,OAAA,CAAC,EAAE,KAAK,EAAE,UAAG,SAAS,OAAI,EAAE,CAAC,EAA7B,CAA6B,CAAC;QACvF,CAAC,sCAAsC,EAAE,UAAC,SAAS,IAAK,OAAA,CAAC,EAAE,KAAK,EAAE,WAAI,SAAS,CAAE,EAAE,CAAC,EAA5B,CAA4B,CAAC;QACrF,CAAC,gCAAgC,EAAE,cAAM,OAAA,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA3B,CAA2B,CAAC;KACtE,CAAC;IACJ,2BAAC;CAAA,AAnBD,IAmBC;AAnBY,oDAAoB"}

package/dist/test/RequestDigests.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=RequestDigests.test.d.ts.map

package/dist/test/RequestDigests.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestDigests.test.d.ts","sourceRoot":"","sources":["../../test/RequestDigests.test.ts"],"names":[],"mappings":""}

package/dist/test/RequestDigests.test.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var crypto_1 = require("crypto");
+var RequestDigests_1 = require("../src/throttle/RequestDigests");
+/**
+ * The two keyed digests the throttled doors key their windows on and write on their log lines:
+ * the account digest (a keyed hash of the lowercased address) and the coarse IP hash. Both are
+ * stable for one key (so an operator can say "one account, one device" across lines, pods and
+ * restarts) and useless without it (never the address, never a plain hash a list of addresses
+ * could reverse).
+ */
+describe('RequestDigests', function () {
+    var digests = new RequestDigests_1.RequestDigests({ secret: 'test-session-secret' });
+    it('the account digest is stable for one address whatever its case or surrounding spaces', function () {
+        var digest = digests.account('Ada.Lovelace@Example.com');
+        expect(digest).toMatch(/^[0-9a-f]{16}$/);
+        expect(digests.account('ada.lovelace@example.com')).toBe(digest);
+        expect(digests.account('  ADA.LOVELACE@EXAMPLE.COM ')).toBe(digest);
+        expect(digests.account('ada.lovelace@example.org')).not.toBe(digest);
+    });
+    it('the account digest is keyed: another key gives another digest, and it is no plain hash of the address', function () {
+        var address = 'ada.lovelace@example.com';
+        var digest = digests.account(address);
+        expect(new RequestDigests_1.RequestDigests({ secret: 'another-secret' }).account(address)).not.toBe(digest);
+        expect((0, crypto_1.createHash)('sha256').update(address).digest('hex')).not.toContain(digest);
+        expect(digest).not.toContain('ada');
+    });
+    it('the account digest and the coarse IP hash are separate: one value never reads as the other', function () {
+        expect(digests.account('203.0.113.7')).not.toBe(digests.coarseIp('203.0.113.7'));
+    });
+    it('the coarse IP hash is stable for one IPv4 address and differs for the next', function () {
+        var hash = digests.coarseIp('203.0.113.7');
+        expect(hash).toMatch(/^[0-9a-f]{16}$/);
+        expect(digests.coarseIp('203.0.113.7')).toBe(hash);
+        expect(digests.coarseIp('::ffff:203.0.113.7')).toBe(hash);
+        expect(digests.coarseIp('203.0.113.8')).not.toBe(hash);
+    });
+    it('IPv6 is coarsened to its /64 — one device rotates freely inside its own /64', function () {
+        var hash = digests.coarseIp('2001:db8:1:2:aaaa:bbbb:cccc:dddd');
+        expect(digests.coarseIp('2001:db8:1:2::1')).toBe(hash);
+        expect(digests.coarseIp('2001:0db8:0001:0002:ffff:0:0:1')).toBe(hash);
+        expect(digests.coarseIp('2001:db8:1:3::1')).not.toBe(hash);
+    });
+    it('with no key configured the digests refuse to run — never a plain hash, never a key of their own', function () {
+        var original = process.env.SESSION_SECRET;
+        delete process.env.SESSION_SECRET;
+        try {
+            expect(function () { return new RequestDigests_1.RequestDigests().account('ada.lovelace@example.com'); }).toThrow(/SESSION_SECRET/);
+            expect(function () { return new RequestDigests_1.RequestDigests({ secret: '' }).coarseIp('203.0.113.7'); }).toThrow(/SESSION_SECRET/);
+        }
+        finally {
+            if (original !== undefined) {
+                process.env.SESSION_SECRET = original;
+            }
+        }
+    });
+    it('reads the key the deployment configures (SESSION_SECRET) when none is passed', function () {
+        var original = process.env.SESSION_SECRET;
+        process.env.SESSION_SECRET = 'test-session-secret';
+        try {
+            expect(new RequestDigests_1.RequestDigests().account('ada.lovelace@example.com')).toBe(digests.account('ada.lovelace@example.com'));
+        }
+        finally {
+            if (original === undefined) {
+                delete process.env.SESSION_SECRET;
+            }
+            else {
+                process.env.SESSION_SECRET = original;
+            }
+        }
+    });
+});
+//# sourceMappingURL=RequestDigests.test.js.map

package/dist/test/RequestDigests.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestDigests.test.js","sourceRoot":"","sources":["../../test/RequestDigests.test.ts"],"names":[],"mappings":";;AAAA,iCAAoC;AACpC,iEAAgE;AAEhE;;;;;;GAMG;AACH,QAAQ,CAAC,gBAAgB,EAAE;IACzB,IAAM,OAAO,GAAG,IAAI,+BAAc,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAEtE,EAAE,CAAC,sFAAsF,EAAE;QACzF,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uGAAuG,EAAE;QAC1G,IAAM,OAAO,GAAG,0BAA0B,CAAC;QAC3C,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,+BAAc,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE;QAC/F,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE;QAC/E,IAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE;QAChF,IAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;QAElE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE;QACpG,IAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAClC,IAAI;YACF,MAAM,CAAC,cAAM,OAAA,IAAI,+BAAc,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAxD,CAAwD,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACjG,MAAM,CAAC,cAAM,OAAA,IAAI,+BAAc,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAA1D,CAA0D,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;SACpG;gBAAS;YACR,IAAI,QAAQ,KAAK,SAAS,EAAE;gBAC1B,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;aACvC;SACF;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE;QACjF,IAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QACnD,IAAI;YACF,MAAM,CAAC,IAAI,+BAAc,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CACnE,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAC5C,CAAC;SACH;gBAAS;YACR,IAAI,QAAQ,KAAK,SAAS,EAAE;gBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;aACnC;iBAAM;gBACL,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;aACvC;SACF;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/SlidingWindow.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SlidingWindow.test.d.ts.map

package/dist/test/SlidingWindow.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlidingWindow.test.d.ts","sourceRoot":"","sources":["../../test/SlidingWindow.test.ts"],"names":[],"mappings":""}

package/dist/test/SlidingWindow.test.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var SlidingWindow_1 = require("../src/throttle/SlidingWindow");
+/**
+ * The per-key sliding window every throttled door shares (the sign-in and reset doors here, the
+ * invite-request door in the consuming app): `hit` records and answers whether the key is over,
+ * `isOver` only reads, `record` only counts, `clear` forgets. Attempts refused as over the window
+ * are not counted, so a key drains exactly one window after its last counted attempt.
+ */
+describe('SlidingWindow', function () {
+    var MINUTE = 60 * 1000;
+    var now = 1700000000000;
+    var clock = function () { return now; };
+    it('admits up to the limit inside the window and refuses the next', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 3, now: clock });
+        expect([window.hit('a'), window.hit('a'), window.hit('a')]).toEqual([false, false, false]);
+        expect(window.hit('a')).toBe(true);
+        expect(window.isOver('a')).toBe(true);
+    });
+    it('keeps each key in its own window', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        window.hit('a');
+        window.hit('a');
+        expect(window.hit('a')).toBe(true);
+        expect(window.hit('b')).toBe(false);
+    });
+    it('drains: an attempt older than the window no longer counts, and refused attempts never counted', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        window.hit('a');
+        now += 4 * MINUTE;
+        window.hit('a');
+        now += 5 * MINUTE;
+        expect(window.hit('a')).toBe(true); // both counted attempts are still inside the window
+        now += 1 * MINUTE + 1; // the first counted attempt left the window; the refused one never counted
+        expect(window.hit('a')).toBe(false);
+        expect(window.hit('a')).toBe(true);
+    });
+    it('isOver reads without counting; record counts without answering; clear forgets the key', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        expect(window.isOver('a')).toBe(false);
+        expect(window.isOver('a')).toBe(false);
+        window.record('a');
+        expect(window.isOver('a')).toBe(false);
+        window.record('a');
+        expect(window.isOver('a')).toBe(true);
+        window.clear('a');
+        expect(window.isOver('a')).toBe(false);
+    });
+    it('forgive uncounts the latest attempt only', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 2, now: clock });
+        window.hit('a');
+        window.hit('a');
+        expect(window.isOver('a')).toBe(true);
+        window.forgive('a');
+        expect(window.isOver('a')).toBe(false);
+        expect(window.hit('a')).toBe(false);
+        expect(window.hit('a')).toBe(true);
+        window.forgive('b'); // a key never seen: nothing to uncount, nothing thrown
+        expect(window.isOver('b')).toBe(false);
+    });
+    it('bounds the keys it tracks: at the bound the oldest-touched key is forgotten first', function () {
+        var window = new SlidingWindow_1.SlidingWindow({ windowMs: 10 * MINUTE, limit: 1, maxKeys: 2, now: clock });
+        window.hit('a');
+        window.hit('b');
+        window.hit('a'); // refused, but 'a' is now the most recently touched
+        window.hit('c'); // at the bound: 'b' (oldest-touched) is forgotten
+        expect(window.isOver('a')).toBe(true);
+        expect(window.isOver('b')).toBe(false);
+        expect(window.isOver('c')).toBe(true);
+    });
+});
+//# sourceMappingURL=SlidingWindow.test.js.map

package/dist/test/SlidingWindow.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlidingWindow.test.js","sourceRoot":"","sources":["../../test/SlidingWindow.test.ts"],"names":[],"mappings":";;AAAA,+DAA8D;AAE9D;;;;;GAKG;AACH,QAAQ,CAAC,eAAe,EAAE;IACxB,IAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,IAAI,GAAG,GAAG,aAAiB,CAAC;IAC5B,IAAM,KAAK,GAAG,cAAM,OAAA,GAAG,EAAH,CAAG,CAAC;IAExB,EAAE,CAAC,+DAA+D,EAAE;QAClE,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE;QACrC,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE;QAClG,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD;QAExF,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,2EAA2E;QAClG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE;QAC1F,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE;QAC7C,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,uDAAuD;QAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE;QACtF,IAAM,MAAM,GAAG,IAAI,6BAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,oDAAoD;QAErE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,kDAAkD;QAEnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/ValidateResetToken.test.js

@@ -39,12 +39,16 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+var crypto_1 = require("crypto");
 var moment_1 = __importDefault(require("moment"));
 var db_1 = require("@proteinjs/db");
 var user_1 = require("@proteinjs/user");
 var validateResetPasswordToken_1 = require("../src/routes/validateResetPasswordToken");
 var PasswordResetToken_1 = require("../src/authentication/PasswordResetToken");
 var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var DbTraffic_1 = require("./DbTraffic");
+var LogCapture_1 = require("./LogCapture");
+var MalformedResetTokens_1 = require("./MalformedResetTokens");
 var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
 var invokeValidate = function (query) { return __awaiter(void 0, void 0, void 0, function () {
     var outcome, response;
@@ -68,22 +72,26 @@ var invokeValidate = function (query) { return __awaiter(void 0, void 0, void 0,
         }
     });
 }); };
-var mintToken = function () { return new PasswordResetToken_1.PasswordResetToken().mint(); };
-var armResetToken = function (email, token, expiration) { return __awaiter(void 0, void 0, void 0, function () {
-    var user;
+var sha256Hex = function (value) { return (0, crypto_1.createHash)('sha256').update(value).digest('hex'); };
+/** A well-formed token that was never issued to anyone. */
+var unissuedToken = function () { return sha256Hex("never issued ".concat(Math.random())); };
+/** A user with a token minted by the owner; `expiration` (when given) replaces the expiry the mint stored. */
+var armResetToken = function (email, expiration) { return __awaiter(void 0, void 0, void 0, function () {
+    var user, token;
     return __generator(this, function (_a) {
         switch (_a.label) {
             case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Reset User', email: email })];
             case 1:
                 user = _a.sent();
-                return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, {
-                        id: user.id,
-                        passwordResetToken: token,
-                        passwordResetTokenExpiration: expiration,
-                    })];
+                return [4 /*yield*/, new PasswordResetToken_1.PasswordResetToken().mint(user)];
             case 2:
+                token = _a.sent();
+                if (!(expiration !== undefined)) return [3 /*break*/, 4];
+                return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, { id: user.id, passwordResetTokenExpiration: expiration })];
+            case 3:
                 _a.sent();
-                return [2 /*return*/];
+                _a.label = 4;
+            case 4: return [2 /*return*/, token];
         }
     });
 }); };
@@ -112,11 +120,9 @@ describe('validateResetPasswordToken route', function () {
         var token, outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0:
-                    token = mintToken();
-                    return [4 /*yield*/, armResetToken('reset-valid@test.local', token, (0, moment_1.default)().add(1, 'hour'))];
+                case 0: return [4 /*yield*/, armResetToken('reset-valid@test.local')];
                 case 1:
-                    _a.sent();
+                    token = _a.sent();
                     return [4 /*yield*/, invokeValidate({ token: token })];
                 case 2:
                     outcome = _a.sent();
@@ -130,11 +136,9 @@ describe('validateResetPasswordToken route', function () {
         var token, outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0:
-                    token = mintToken();
-                    return [4 /*yield*/, armResetToken('reset-expired@test.local', token, (0, moment_1.default)().subtract(1, 'minute'))];
+                case 0: return [4 /*yield*/, armResetToken('reset-expired@test.local', (0, moment_1.default)().subtract(1, 'minute'))];
                 case 1:
-                    _a.sent();
+                    token = _a.sent();
                     return [4 /*yield*/, invokeValidate({ token: token })];
                 case 2:
                     outcome = _a.sent();
@@ -149,7 +153,7 @@ describe('validateResetPasswordToken route', function () {
         var outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0: return [4 /*yield*/, invokeValidate({ token: mintToken() })];
+                case 0: return [4 /*yield*/, invokeValidate({ token: unissuedToken() })];
                 case 1:
                     outcome = _a.sent();
                     expect(outcome.status).toBe(200);
@@ -159,32 +163,151 @@ describe('validateResetPasswordToken route', function () {
             }
         });
     }); });
-    it.each([
-        ['a string of another shape', 'tok-never-issued'],
-        ['a parsed array', ['a', 'b']],
-        ['a parsed object', { passwordResetToken: null }],
-    ])('%s resolves invalid without a lookup and leaks no email', function (_label, token) { return __awaiter(void 0, void 0, void 0, function () {
-        var outcome;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, invokeValidate({ token: token })];
+    it('the stored digest presented as a token resolves invalid — the row holds nothing that can be presented', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, row, _a, outcome, traffic;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, armResetToken('reset-digest@test.local')];
                 case 1:
-                    outcome = _a.sent();
+                    token = _b.sent();
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(user_1.tables.User, { email: 'reset-digest@test.local' })];
+                case 2:
+                    row = _b.sent();
+                    expect(row.passwordResetToken).toBe(sha256Hex(token));
+                    return [4 /*yield*/, DbTraffic_1.DbTraffic.during(testEnv.spannerDriver, function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0: return [4 /*yield*/, invokeValidate({ token: row.passwordResetToken })];
+                                case 1: return [2 /*return*/, _a.sent()];
+                            }
+                        }); }); })];
+                case 3:
+                    _a = _b.sent(), outcome = _a.result, traffic = _a.traffic;
                     expect(outcome.status).toBe(200);
                     expect(outcome.body).toEqual({ isValid: false, message: 'Invalid token' });
+                    expect(traffic.lookups).toEqual([{ passwordResetToken: sha256Hex(sha256Hex(token)) }]);
+                    expect(traffic.statements).toBe(1);
+                    expect(traffic.writes).toBe(0);
                     return [2 /*return*/];
             }
         });
     }); });
-    it('a missing token is a 400', function () { return __awaiter(void 0, void 0, void 0, function () {
-        var outcome;
+    it('a token an earlier release stored in clear resolves invalid — no migration, the person asks again', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var clearToken, user, outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0: return [4 /*yield*/, invokeValidate({})];
+                case 0:
+                    clearToken = unissuedToken();
+                    return [4 /*yield*/, testEnv.createUser({ name: 'Reset User', email: 'reset-stored-in-clear@test.local' })];
                 case 1:
+                    user = _a.sent();
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, {
+                            id: user.id,
+                            passwordResetToken: clearToken,
+                            passwordResetTokenExpiration: (0, moment_1.default)().add(1, 'hour'),
+                        })];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, invokeValidate({ token: clearToken })];
+                case 3:
                     outcome = _a.sent();
-                    expect(outcome.status).toBe(400);
-                    expect(outcome.body.isValid).toBe(false);
+                    expect(outcome.status).toBe(200);
+                    expect(outcome.body).toEqual({ isValid: false, message: 'Invalid token' });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    describe('a query without a well-formed token is invalid without a lookup', function () {
+        var liveToken;
+        beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, armResetToken('reset-shapes@test.local')];
+                    case 1:
+                        liveToken = _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        it.each(MalformedResetTokens_1.MalformedResetTokens.CASES)('%s: invalid, no email, and nothing reaches the database', function (_label, tokenField) { return __awaiter(void 0, void 0, void 0, function () {
+            var query, _a, outcome, traffic;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        query = tokenField(liveToken);
+                        return [4 /*yield*/, DbTraffic_1.DbTraffic.during(testEnv.spannerDriver, function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, invokeValidate(query)];
+                                    case 1: return [2 /*return*/, _a.sent()];
+                                }
+                            }); }); })];
+                    case 1:
+                        _a = _b.sent(), outcome = _a.result, traffic = _a.traffic;
+                        // Nothing usable in the query is a 400; anything else that is not a token is an invalid token.
+                        expect(outcome).toEqual(query.token
+                            ? { status: 200, body: { isValid: false, message: 'Invalid token' } }
+                            : { status: 400, body: { isValid: false, message: 'No token provided' } });
+                        expect(traffic).toEqual(DbTraffic_1.DbTraffic.NONE);
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        it('after every refusal the live token is still valid', function () { return __awaiter(void 0, void 0, void 0, function () {
+            var outcome;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, invokeValidate({ token: liveToken })];
+                    case 1:
+                        outcome = _a.sent();
+                        expect(outcome.body).toEqual({ isValid: true, email: 'reset-shapes@test.local' });
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+    });
+    it('no token, no leading characters of one and no full digest reach the log — every verdict', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var live, expired, unissued, log, _i, _a, token;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, armResetToken('reset-log-live@test.local')];
+                case 1:
+                    live = _b.sent();
+                    return [4 /*yield*/, armResetToken('reset-log-expired@test.local', (0, moment_1.default)().subtract(1, 'minute'))];
+                case 2:
+                    expired = _b.sent();
+                    unissued = unissuedToken();
+                    return [4 /*yield*/, LogCapture_1.LogCapture.during(function () { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, invokeValidate({ token: unissued })];
+                                    case 1:
+                                        _a.sent();
+                                        return [4 /*yield*/, invokeValidate({ token: live.toUpperCase() })];
+                                    case 2:
+                                        _a.sent();
+                                        return [4 /*yield*/, invokeValidate({ token: sha256Hex(live) })];
+                                    case 3:
+                                        _a.sent();
+                                        return [4 /*yield*/, invokeValidate({ token: expired })];
+                                    case 4:
+                                        _a.sent();
+                                        return [4 /*yield*/, invokeValidate({ token: live })];
+                                    case 5:
+                                        _a.sent();
+                                        return [2 /*return*/];
+                                }
+                            });
+                        }); })];
+                case 3:
+                    log = _b.sent();
+                    // The capture saw the route's lines: the refusals above logged.
+                    expect(log.text).toContain('Invalid reset token used');
+                    expect(log.text).toContain('Expired reset token used');
+                    expect(log.lines.length).toBeGreaterThanOrEqual(4);
+                    // The digest presented as a token is covered by `live`: its full digest is what was presented.
+                    for (_i = 0, _a = [unissued, live, expired]; _i < _a.length; _i++) {
+                        token = _a[_i];
+                        log.expectFreeOf(token);
+                    }
                     return [2 /*return*/];
             }
         });

package/dist/test/ValidateResetToken.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"ValidateResetToken.test.js","sourceRoot":"","sources":["../../test/ValidateResetToken.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAAyC;AACzC,uFAAsF;AACtF,+EAA8E;AAC9E,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAehD,IAAM,cAAc,GAAG,UAAO,KAA8B;;;;;gBACpD,OAAO,GAAiB,EAAE,CAAC;gBAC3B,QAAQ,GAAG;oBACf,MAAM,YAAC,IAAY;wBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wBACtB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,YAAC,IAAc;wBACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;iBACF,CAAC;gBACF,qBAAM,uDAA0B,CAAC,SAAS,CAAC,EAAE,KAAK,OAAA,EAAW,EAAE,QAAiB,CAAC,EAAA;;gBAAjF,SAAiF,CAAC;gBAClF,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAEF,IAAM,SAAS,GAAG,cAAM,OAAA,IAAI,uCAAkB,EAAE,CAAC,IAAI,EAAE,EAA/B,CAA+B,CAAC;AAExD,IAAM,aAAa,GAAG,UAAO,KAAa,EAAE,KAAa,EAAE,UAAyB;;;;oBACrE,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gBAA9D,IAAI,GAAG,SAAuD;gBACpE,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;wBACxC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,kBAAkB,EAAE,KAAK;wBACzB,4BAA4B,EAAE,UAAU;qBACzC,CAAC,EAAA;;gBAJF,SAIE,CAAC;;;;KACJ,CAAC;AAEF,QAAQ,CAAC,kCAAkC,EAAE;IAC3C,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE;;;;;oBAChF,KAAK,GAAG,SAAS,EAAE,CAAC;oBAC1B,qBAAM,aAAa,CAAC,wBAAwB,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;oBAA7E,SAA6E,CAAC;oBAE9D,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;;;;SAClF,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;;oBACnD,KAAK,GAAG,SAAS,EAAE,CAAC;oBAC1B,qBAAM,aAAa,CAAC,0BAA0B,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAA;;oBAAtF,SAAsF,CAAC;oBAEvE,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;wBACzC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,EAAA;;oBAAtD,OAAO,GAAG,SAA4C;oBAE5D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,2BAA2B,EAAE,kBAAkB,CAAC;QACjD,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC,iBAAiB,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;KAClD,CAAC,CAAC,yDAAyD,EAAE,UAAO,MAAM,EAAE,KAAK;;;;wBAChE,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;;;;SAC5E,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE;;;;wBACb,qBAAM,cAAc,CAAC,EAAE,CAAC,EAAA;;oBAAlC,OAAO,GAAG,SAAwB;oBAExC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;;;SAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"ValidateResetToken.test.js","sourceRoot":"","sources":["../../test/ValidateResetToken.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAAoC;AACpC,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAAyC;AACzC,uFAAsF;AACtF,+EAA8E;AAC9E,yEAAwE;AACxE,yCAAwC;AACxC,2CAA0C;AAC1C,+DAA8D;AAE9D,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAsBhD,IAAM,cAAc,GAAG,UAAO,KAA8B;;;;;gBACpD,OAAO,GAAiB,EAAE,CAAC;gBAC3B,QAAQ,GAAG;oBACf,MAAM,YAAC,IAAY;wBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wBACtB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,YAAC,IAAc;wBACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;iBACF,CAAC;gBACF,qBAAM,uDAA0B,CAAC,SAAS,CAAC,EAAE,KAAK,OAAA,EAAW,EAAE,QAAiB,CAAC,EAAA;;gBAAjF,SAAiF,CAAC;gBAClF,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAEF,IAAM,SAAS,GAAG,UAAC,KAAa,IAAK,OAAA,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAhD,CAAgD,CAAC;AAEtF,2DAA2D;AAC3D,IAAM,aAAa,GAAG,cAAM,OAAA,SAAS,CAAC,uBAAgB,IAAI,CAAC,MAAM,EAAE,CAAE,CAAC,EAA1C,CAA0C,CAAC;AAEvE,8GAA8G;AAC9G,IAAM,aAAa,GAAG,UAAO,KAAa,EAAE,UAA0B;;;;oBACvD,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gBAA9D,IAAI,GAAG,SAAuD;gBACtD,qBAAM,IAAI,uCAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAA;;gBAAjD,KAAK,GAAG,SAAyC;qBACnD,CAAA,UAAU,KAAK,SAAS,CAAA,EAAxB,wBAAwB;gBAC1B,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,4BAA4B,EAAE,UAAU,EAAE,CAAC,EAAA;;gBAApG,SAAoG,CAAC;;oBAEvG,sBAAO,KAAK,EAAC;;;KACd,CAAC;AAEF,QAAQ,CAAC,kCAAkC,EAAE;IAC3C,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE;;;;wBACxE,qBAAM,aAAa,CAAC,wBAAwB,CAAC,EAAA;;oBAArD,KAAK,GAAG,SAA6C;oBAE3C,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;;;;SAClF,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;wBAC3C,qBAAM,aAAa,CAAC,0BAA0B,EAAE,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAA;;oBAAvF,KAAK,GAAG,SAA+E;oBAE7E,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;wBACzC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC,EAAA;;oBAA1D,OAAO,GAAG,SAAgD;oBAEhE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,uGAAuG,EAAE;;;;wBAC5F,qBAAM,aAAa,CAAC,yBAAyB,CAAC,EAAA;;oBAAtD,KAAK,GAAG,SAA8C;oBAChD,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,EAAA;;oBAAlF,GAAG,GAAG,SAA4E;oBACxF,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;oBAEjB,qBAAM,qBAAS,CAAC,MAAM,CACzD,OAAO,CAAC,aAAa,EACrB;;wCAAY,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,EAAA;wCAAvD,sBAAA,SAAuD,EAAA;;iCAAA,CACpE,EAAA;;oBAHK,KAA+B,SAGpC,EAHe,OAAO,YAAA,EAAE,OAAO,aAAA;oBAKhC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;oBAC3E,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;;;SAChC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE;;;;;oBAChG,UAAU,GAAG,aAAa,EAAE,CAAC;oBACtB,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,EAAA;;oBAAlG,IAAI,GAAG,SAA2F;oBACxG,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;4BACxC,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,kBAAkB,EAAE,UAAU;4BAC9B,4BAA4B,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;yBACtD,CAAC,EAAA;;oBAJF,SAIE,CAAC;oBAEa,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAArD,OAAO,GAAG,SAA2C;oBAE3D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;;;;SAC5E,CAAC,CAAC;IAEH,QAAQ,CAAC,iEAAiE,EAAE;QAC1E,IAAI,SAAiB,CAAC;QAEtB,SAAS,CAAC;;;4BACI,qBAAM,aAAa,CAAC,yBAAyB,CAAC,EAAA;;wBAA1D,SAAS,GAAG,SAA8C,CAAC;;;;aAC5D,CAAC,CAAC;QAEH,EAAE,CAAC,IAAI,CAAC,2CAAoB,CAAC,KAAK,CAAC,CACjC,yDAAyD,EACzD,UAAO,MAAM,EAAE,UAAU;;;;;wBACjB,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;wBAEC,qBAAM,qBAAS,CAAC,MAAM,CACzD,OAAO,CAAC,aAAa,EACrB;;4CAAY,qBAAM,cAAc,CAAC,KAAK,CAAC,EAAA;4CAA3B,sBAAA,SAA2B,EAAA;;qCAAA,CACxC,EAAA;;wBAHK,KAA+B,SAGpC,EAHe,OAAO,YAAA,EAAE,OAAO,aAAA;wBAKhC,+FAA+F;wBAC/F,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CACrB,KAAK,CAAC,KAAK;4BACT,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE;4BACrE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,CAC5E,CAAC;wBACF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAS,CAAC,IAAI,CAAC,CAAC;;;;aACzC,CACF,CAAC;QAEF,EAAE,CAAC,mDAAmD,EAAE;;;;4BACtC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;wBAApD,OAAO,GAAG,SAA0C;wBAE1D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;;;;aACnF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE;;;;wBAC/E,qBAAM,aAAa,CAAC,2BAA2B,CAAC,EAAA;;oBAAvD,IAAI,GAAG,SAAgD;oBAC7C,qBAAM,aAAa,CAAC,8BAA8B,EAAE,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAA;;oBAA7F,OAAO,GAAG,SAAmF;oBAC7F,QAAQ,GAAG,aAAa,EAAE,CAAC;oBAErB,qBAAM,uBAAU,CAAC,MAAM,CAAC;;;4CAClC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAA;;wCAAzC,SAAyC,CAAC;wCAC1C,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAA;;wCAAnD,SAAmD,CAAC;wCACpD,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;wCAAhD,SAAgD,CAAC;wCACjD,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAA;;wCAAxC,SAAwC,CAAC;wCACzC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAA;;wCAArC,SAAqC,CAAC;;;;6BACvC,CAAC,EAAA;;oBANI,GAAG,GAAG,SAMV;oBAEF,gEAAgE;oBAChE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;oBACvD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;oBACvD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;oBACnD,+FAA+F;oBAC/F,WAA6C,EAAzB,MAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAzB,cAAyB,EAAzB,IAAyB,EAAE;wBAApC,KAAK;wBACd,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;qBACzB;;;;SACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/emulatorLock.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=emulatorLock.test.d.ts.map

package/dist/test/emulatorLock.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emulatorLock.test.d.ts","sourceRoot":"","sources":["../../test/emulatorLock.test.ts"],"names":[],"mappings":""}

package/dist/test/emulatorLock.test.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var crypto_1 = __importDefault(require("crypto"));
+var os_1 = __importDefault(require("os"));
+var path_1 = __importDefault(require("path"));
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+var lockFilePathFor = require('./emulatorLock').lockFilePathFor;
+/**
+ * The lockfile path is a CONTRACT between every copy of the emulator lock: two jest runs only
+ * serialize when they compute the same file for the same emulator host. The formula is pinned
+ * here byte for byte — a neutral `spanner-emulator-` name (no application's name belongs in a
+ * shared lock), the sanitized host slug, and the first 8 hex characters of the host's sha1.
+ */
+describe('emulatorLock.lockFilePathFor', function () {
+    var expectedFor = function (host, slug) {
+        return path_1.default.join(os_1.default.tmpdir(), "spanner-emulator-".concat(slug, "-").concat(crypto_1.default.createHash('sha1').update(host).digest('hex').slice(0, 8), ".lock"));
+    };
+    it('names the lock by the emulator alone: spanner-emulator-<slug>-<sha1[0..8]>.lock in os.tmpdir()', function () {
+        expect(lockFilePathFor('localhost:9010')).toBe(expectedFor('localhost:9010', 'localhost-9010'));
+        expect(lockFilePathFor('127.0.0.1:9710')).toBe(expectedFor('127.0.0.1:9710', '127-0-0-1-9710'));
+    });
+    it('gives two emulators two files, and one emulator the same file every time', function () {
+        expect(lockFilePathFor('localhost:9010')).toBe(lockFilePathFor('localhost:9010'));
+        expect(lockFilePathFor('localhost:9010')).not.toBe(lockFilePathFor('localhost:9011'));
+        // The hash keeps hosts apart even when their slugs collide.
+        expect(lockFilePathFor('localhost:9010')).not.toBe(lockFilePathFor('localhost-9010'));
+    });
+});
+//# sourceMappingURL=emulatorLock.test.js.map

package/dist/test/emulatorLock.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emulatorLock.test.js","sourceRoot":"","sources":["../../test/emulatorLock.test.ts"],"names":[],"mappings":";;;;;AAAA,kDAA4B;AAC5B,0CAAoB;AACpB,8CAAwB;AAExB,8DAA8D;AACtD,IAAA,eAAe,GAAK,OAAO,CAAC,gBAAgB,CAAkD,gBAA/E,CAAgF;AAEvG;;;;;GAKG;AACH,QAAQ,CAAC,8BAA8B,EAAE;IACvC,IAAM,WAAW,GAAG,UAAC,IAAY,EAAE,IAAY;QAC7C,OAAA,cAAI,CAAC,IAAI,CACP,YAAE,CAAC,MAAM,EAAE,EACX,2BAAoB,IAAI,cAAI,gBAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAO,CACpG;IAHD,CAGC,CAAC;IAEJ,EAAE,CAAC,gGAAgG,EAAE;QACnG,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE;QAC7E,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtF,4DAA4D;QAC5D,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/emulatorLockName.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=emulatorLockName.test.d.ts.map

package/dist/test/emulatorLockName.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emulatorLockName.test.d.ts","sourceRoot":"","sources":["../../test/emulatorLockName.test.ts"],"names":[],"mappings":""}

package/dist/test/emulatorLockName.test.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var os_1 = __importDefault(require("os"));
+var path_1 = __importDefault(require("path"));
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+var lockFilePathFor = require('./emulatorLock').lockFilePathFor;
+/**
+ * The emulator lock's FILE NAME is a contract between every copy of the lock: two jest runs
+ * serialize on a shared emulator only when they compute the same file for the same host. No
+ * shared package carries the lock yet, so the contract is pinned by value — this table is the
+ * same, row for row, in every repository that keeps a copy. A change to a row here is a change
+ * to all of them, made in the same window; a copy that drifts stops contending, silently.
+ */
+// [emulator host, lock file name, what the row pins]
+var LOCK_FILE_NAMES = [
+    ['localhost:9010', 'spanner-emulator-localhost-9010-0091e79a.lock', 'the default shared emulator'],
+    [
+        'localhost-9010',
+        'spanner-emulator-localhost-9010-493b66d1.lock',
+        'the same slug as the row above: the hash alone keeps two hosts apart',
+    ],
+    [
+        '[emulator.a-host-name-long-enough-to-run-past-the-sixty-four-cap.example.test]:9010',
+        'spanner-emulator-emulator-a-host-name-long-enough-to-run-past-the-sixty-four-cap--fe958a1a.lock',
+        'edge dashes trimmed first, the slug capped at 64 second (the cap lands on a dash, and it stays)',
+    ],
+];
+describe('the emulator lock file name (the contract every copy of the lock shares)', function () {
+    it.each(LOCK_FILE_NAMES)('%s locks on %s (%s)', function (host, fileName) {
+        expect(lockFilePathFor(host)).toBe(path_1.default.join(os_1.default.tmpdir(), fileName));
+    });
+});
+//# sourceMappingURL=emulatorLockName.test.js.map

package/dist/test/emulatorLockName.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emulatorLockName.test.js","sourceRoot":"","sources":["../../test/emulatorLockName.test.ts"],"names":[],"mappings":";;;;;AAAA,0CAAoB;AACpB,8CAAwB;AAExB,8DAA8D;AACtD,IAAA,eAAe,GAAK,OAAO,CAAC,gBAAgB,CAAkD,gBAA/E,CAAgF;AAEvG;;;;;;GAMG;AACH,qDAAqD;AACrD,IAAM,eAAe,GAA+B;IAClD,CAAC,gBAAgB,EAAE,+CAA+C,EAAE,6BAA6B,CAAC;IAClG;QACE,gBAAgB;QAChB,+CAA+C;QAC/C,sEAAsE;KACvE;IACD;QACE,qFAAqF;QACrF,iGAAiG;QACjG,iGAAiG;KAClG;CACF,CAAC;AAEF,QAAQ,CAAC,0EAA0E,EAAE;IACnF,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,qBAAqB,EAAE,UAAC,IAAI,EAAE,QAAQ;QAC7D,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}