mppx 0.6.31 → 0.8.0

package/src/tempo/{server → legacy/server}/Session.test.ts

@@ -21,10 +21,8 @@ import { waitForTransactionReceipt } from 'viem/actions'
 import { Account as TempoAccount, Actions, Addresses } from 'viem/tempo'
 import { beforeAll, beforeEach, describe, expect, expectTypeOf, test } from 'vp/test'
 import { WebSocketServer } from 'ws'
-import { nodeEnv } from '~test/config.js'
+import { tempoNetwork } from '~test/config.js'
 import * as Http from '~test/Http.js'
-
-const isLocalnet = nodeEnv === 'localnet'
 import {
   closeChannelOnChain,
   deployEscrow,
@@ -32,7 +30,7 @@ import {
   signOpenChannel,
   signTopUpChannel,
   topUpChannel,
-} from '~test/tempo/session.js'
+} from '~test/tempo/legacy/session.js'
 import { accounts, asset, chain, client, fundAccount, http } from '~test/tempo/viem.js'
 
 import {
@@ -40,21 +38,22 @@ import {
   ChannelNotFoundError,
   InsufficientBalanceError,
   InvalidSignatureError,
-} from '../../Errors.js'
-import * as NodeRequest from '../../server/Request.js'
-import * as Store from '../../Store.js'
-import { sessionManager } from '../client/SessionManager.js'
+} from '../../../Errors.js'
+import * as NodeRequest from '../../../server/Request.js'
+import * as Store from '../../../Store.js'
 import {
   chainId as chainIdDefaults,
   escrowContract as escrowContractDefaults,
-} from '../internal/defaults.js'
-import type * as Methods from '../Methods.js'
+} from '../../internal/defaults.js'
+import type * as Methods from '../../Methods.js'
+import { deserializeSessionReceipt } from '../../session/precompile/Protocol.js'
+import { serializeSessionReceipt } from '../../session/precompile/Protocol.js'
+import type { SessionReceipt } from '../../session/precompile/Protocol.js'
+import * as TempoWs from '../../session/server/Ws.js'
+import { sessionManager } from '../client/SessionManager.js'
 import * as ChannelStore from '../session/ChannelStore.js'
-import { deserializeSessionReceipt } from '../session/Receipt.js'
-import { serializeSessionReceipt } from '../session/Receipt.js'
-import type { SessionCredentialPayload, SessionReceipt } from '../session/Types.js'
+import type { LegacySessionCredentialPayload } from '../session/Types.js'
 import { signVoucher } from '../session/Voucher.js'
-import * as TempoWs from '../session/Ws.js'
 import { charge, session, settle } from './Session.js'
 
 const payer = accounts[2]
@@ -62,6 +61,7 @@ const delegatedSigner = accounts[4]
 const recipientAccount = accounts[0]
 const recipient = accounts[0].address
 const currency = asset
+const isLocalnet = tempoNetwork === 'localnet'
 
 let escrowContract: Address
 let saltCounter = 0
@@ -112,7 +112,7 @@ describe.runIf(isLocalnet)('session', () => {
   function createHandler(overrides: Partial<session.Parameters> = {}) {
     return Mppx_server.create({
       methods: [
-        tempo_server.session({
+        tempo_server.sessionLegacy({
           store: rawStore,
           getClient: () => client,
           account: recipientAccount,
@@ -123,7 +123,7 @@ describe.runIf(isLocalnet)('session', () => {
         } as session.Parameters),
       ],
       realm: 'api.example.com',
-      secretKey: 'secret',
+      secretKey: 'test-secret-key-test-secret-key-32',
     })
   }
 
@@ -2285,7 +2285,7 @@ describe.runIf(isLocalnet)('session', () => {
           })
         }
 
-        const credential = Credential.deserialize<SessionCredentialPayload>(authorization)
+        const credential = Credential.deserialize<LegacySessionCredentialPayload>(authorization)
         if (credential.payload.action === 'open') {
           return new Response('ok', {
             status: 200,
@@ -3473,6 +3473,71 @@ describe.runIf(isLocalnet)('session', () => {
       expect(persisted?.finalized).toBe(true)
     })
 
+    test('sessionManager closes at accepted cumulative when HTTP receipt spent is per-request delta', async () => {
+      const handler = createHandler()
+      const route = handler.session({
+        amount: '1',
+        decimals: 6,
+        unitType: 'token',
+      })
+
+      let lastAcceptedCumulative = 0n
+      const fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
+        const request = new Request(input, init)
+        const result = await route(request)
+        if (result.status === 402) return result.challenge
+
+        const response = result.withReceipt(new Response('ok'))
+        const receiptHeader = response.headers.get('Payment-Receipt')
+        if (!receiptHeader) return response
+
+        const receipt = deserializeSessionReceipt(receiptHeader)
+        if (
+          Credential.fromRequest<LegacySessionCredentialPayload>(request).payload?.action ===
+          'close'
+        ) {
+          return response
+        }
+
+        const acceptedCumulative = BigInt(receipt.acceptedCumulative)
+        const delta = acceptedCumulative - lastAcceptedCumulative
+        lastAcceptedCumulative = acceptedCumulative
+        return new Response(response.body, {
+          status: response.status,
+          statusText: response.statusText,
+          headers: {
+            'Payment-Receipt': serializeSessionReceipt({
+              ...receipt,
+              spent: delta.toString(),
+            }),
+          },
+        })
+      }
+
+      const manager = sessionManager({
+        account: payer,
+        client,
+        escrowContract,
+        fetch,
+        maxDeposit: '3',
+      })
+
+      const first = await manager.fetch('https://api.example.com/resource')
+      expect(first.status).toBe(200)
+      expect(first.receipt?.acceptedCumulative).toBe('1000000')
+      expect(first.receipt?.spent).toBe('1000000')
+
+      const second = await manager.fetch('https://api.example.com/resource')
+      expect(second.status).toBe(200)
+      expect(second.receipt?.acceptedCumulative).toBe('2000000')
+      expect(second.receipt?.spent).toBe('1000000')
+
+      const closeReceipt = await manager.close()
+      expect(closeReceipt?.status).toBe('success')
+      expect(closeReceipt?.acceptedCumulative).toBe('2000000')
+      expect(closeReceipt?.spent).toBe('2000000')
+    })
+
     test('sessionManager rejects receipts that exceed the locally signed voucher', async () => {
       const handler = createHandler()
       const route = handler.session({
@@ -4201,7 +4266,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4211,7 +4276,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
@@ -4243,7 +4308,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4253,7 +4318,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
@@ -4286,7 +4351,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4296,7 +4361,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
@@ -4336,7 +4401,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4347,7 +4412,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
@@ -4381,7 +4446,7 @@ describe.runIf(isLocalnet)('session', () => {
     test('behavior: withReceipt accepts async generator and returns Response', async () => {
       const handler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             account: accounts[0],
             currency: asset,
             escrowContract,
@@ -4390,7 +4455,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       })
 
       const result = await handler.session({
@@ -4401,7 +4466,7 @@ describe.runIf(isLocalnet)('session', () => {
 
       if (result.status === 200) {
         // async generator function should be accepted and return Response
-        const response = result.withReceipt(async function* (_stream) {
+        const response = result.withReceipt(async function* (_stream: unknown) {
           yield 'token'
         })
         expectTypeOf(response).toEqualTypeOf<Response>()
@@ -4426,7 +4491,7 @@ describe.runIf(isLocalnet)('session', () => {
     test('behavior: non-SSE session withReceipt only accepts Response', async () => {
       const handler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             account: accounts[0],
             currency: asset,
             escrowContract,
@@ -4434,7 +4499,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       })
 
       const result = await handler.session({
@@ -4453,7 +4518,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4464,7 +4529,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       let voucherPosts = 0
@@ -4488,7 +4553,7 @@ describe.runIf(isLocalnet)('session', () => {
         }
 
         if (request.headers.get('Accept')?.includes('text/event-stream')) {
-          return result.withReceipt(async function* (stream) {
+          return result.withReceipt(async function* (stream: { charge(): Promise<void> }) {
             await stream.charge()
             yield 'chunk-1'
             await stream.charge()
@@ -4531,7 +4596,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4542,7 +4607,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'request' })
 
       let voucherPosts = 0
@@ -4616,7 +4681,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const route = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4627,7 +4692,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const { channelId, serializedTransaction } = await createSignedOpenTransaction(10000000n)
@@ -4699,7 +4764,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4710,7 +4775,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       let voucherPosts = 0
@@ -4734,7 +4799,7 @@ describe.runIf(isLocalnet)('session', () => {
         }
 
         if (request.headers.get('Accept')?.includes('text/event-stream')) {
-          return result.withReceipt(async function* (stream) {
+          return result.withReceipt(async function* (stream: { charge(): Promise<void> }) {
             await stream.charge()
             yield 'chunk-1'
             await stream.charge()
@@ -4773,7 +4838,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4784,7 +4849,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
@@ -4793,7 +4858,7 @@ describe.runIf(isLocalnet)('session', () => {
         if (result.status === 402) return result.challenge
 
         if (request.headers.get('Accept')?.includes('text/event-stream')) {
-          return result.withReceipt(async function* (stream) {
+          return result.withReceipt(async function* (stream: { charge(): Promise<void> }) {
             await stream.charge()
             yield 'chunk-1'
             await stream.charge()
@@ -4825,7 +4890,7 @@ describe.runIf(isLocalnet)('session', () => {
       const handler = Mppx_server.create({
         methods: [tempo_server.charge({ account: accounts[0], currency: asset })],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       })
 
       const result = await handler.charge({
@@ -4845,7 +4910,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4855,7 +4920,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       let voucherUpdates = 0
@@ -4958,7 +5023,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -4968,7 +5033,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       let voucherUpdates = 0
@@ -5071,7 +5136,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -5081,7 +5146,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const route = (request: Request) => routeHandler(request)
@@ -5181,7 +5246,7 @@ describe.runIf(isLocalnet)('session', () => {
     test('rejects websocket receipts bound to a different channel', async () => {
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: Store.memory(),
             getClient: () => client,
             account: recipientAccount,
@@ -5191,7 +5256,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const httpHandler = NodeRequest.toNodeListener(async (request) => {
@@ -5268,7 +5333,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -5278,7 +5343,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const route = (request: Request) => routeHandler(request)
@@ -5361,7 +5426,7 @@ describe.runIf(isLocalnet)('session', () => {
     test('rejects close-ready receipts beyond local voucher state', async () => {
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: Store.memory(),
             getClient: () => client,
             account: recipientAccount,
@@ -5371,7 +5436,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const httpHandler = NodeRequest.toNodeListener(async (request) => {
@@ -5470,7 +5535,7 @@ describe.runIf(isLocalnet)('session', () => {
       const backingStore = Store.memory()
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: backingStore,
             getClient: () => client,
             account: recipientAccount,
@@ -5480,7 +5545,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const route = (request: Request) => routeHandler(request)
@@ -5572,7 +5637,7 @@ describe.runIf(isLocalnet)('session', () => {
     test('rejects tx-bearing open receipts replayed during websocket close', async () => {
       const routeHandler = Mppx_server.create({
         methods: [
-          tempo_server.session({
+          tempo_server.sessionLegacy({
             store: Store.memory(),
             getClient: () => client,
             account: recipientAccount,
@@ -5582,7 +5647,7 @@ describe.runIf(isLocalnet)('session', () => {
           }),
         ],
         realm: 'api.example.com',
-        secretKey: 'secret',
+        secretKey: 'test-secret-key-test-secret-key-32',
       }).session({ amount: '1', decimals: 6, unitType: 'token' })
 
       const httpHandler = NodeRequest.toNodeListener(async (request) => {
@@ -5691,7 +5756,7 @@ describe('monotonicity and TOCTOU (unit tests)', () => {
 
   function seedChannel(
     store: ChannelStore.ChannelStore,
-    overrides: Partial<ChannelStore.State> = {},
+    overrides: Partial<ChannelStore.BaseState & ChannelStore.LegacyContractBackendState> = {},
   ) {
     return store.updateChannel(testChannelId, () => ({
       channelId: testChannelId,
@@ -6031,7 +6096,7 @@ describe('session default currency resolution', () => {
   test('challenge contains USDC currency (mainnet default)', async () => {
     const handler = Mppx_server.create({
       methods: [
-        tempo_server.session({
+        tempo_server.sessionLegacy({
           store: Store.memory(),
           getClient: () => mockMainnetClient,
           account: mockAccount,
@@ -6041,7 +6106,7 @@ describe('session default currency resolution', () => {
         }),
       ],
       realm: 'api.example.com',
-      secretKey: 'secret',
+      secretKey: 'test-secret-key-test-secret-key-32',
     })
 
     const result = await (handler.session as Function)({
@@ -6058,7 +6123,7 @@ describe('session default currency resolution', () => {
   test('challenge contains pathUSD currency when testnet: true', async () => {
     const handler = Mppx_server.create({
       methods: [
-        tempo_server.session({
+        tempo_server.sessionLegacy({
           store: Store.memory(),
           getClient: () => mockTestnetClient,
           account: mockAccount,
@@ -6067,7 +6132,7 @@ describe('session default currency resolution', () => {
         }),
       ],
       realm: 'api.example.com',
-      secretKey: 'secret',
+      secretKey: 'test-secret-key-test-secret-key-32',
     })
 
     const result = await (handler.session as Function)({
@@ -6085,7 +6150,7 @@ describe('session default currency resolution', () => {
   test('challenge contains pathUSD currency (unknown chain)', async () => {
     const handler = Mppx_server.create({
       methods: [
-        tempo_server.session({
+        tempo_server.sessionLegacy({
           store: Store.memory(),
           getClient: () => mockTestnetClient,
           account: mockAccount,
@@ -6094,7 +6159,7 @@ describe('session default currency resolution', () => {
         }),
       ],
       realm: 'api.example.com',
-      secretKey: 'secret',
+      secretKey: 'test-secret-key-test-secret-key-32',
     })
 
     const result = await (handler.session as Function)({
@@ -6111,7 +6176,7 @@ describe('session default currency resolution', () => {
   test('explicit currency in challenge overrides testnet default', async () => {
     const handler = Mppx_server.create({
       methods: [
-        tempo_server.session({
+        tempo_server.sessionLegacy({
           store: Store.memory(),
           getClient: () => mockClient,
           account: mockAccount,
@@ -6122,7 +6187,7 @@ describe('session default currency resolution', () => {
         }),
       ],
       realm: 'api.example.com',
-      secretKey: 'secret',
+      secretKey: 'test-secret-key-test-secret-key-32',
     })
 
     const result = await handler.session({
@@ -6140,7 +6205,7 @@ describe('session default currency resolution', () => {
   test('handler.session throws for zero-amount routes', () => {
     const handler = Mppx_server.create({
       methods: [
-        tempo_server.session({
+        tempo_server.sessionLegacy({
           store: Store.memory(),
           getClient: () => mockClient,
           account: mockAccount,
@@ -6149,7 +6214,7 @@ describe('session default currency resolution', () => {
         }),
       ],
       realm: 'api.example.com',
-      secretKey: 'secret',
+      secretKey: 'test-secret-key-test-secret-key-32',
     })
 
     expect(() =>