From 8d2ed31fef2a4f81d33a147fd84a48594c062b3c Mon Sep 17 00:00:00 2001 From: Antoine Gersant Date: Sat, 5 Dec 2020 16:53:46 -0800 Subject: [PATCH] Validate that session cookie looks somewhat encrypted --- src/service/test/auth.rs | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/src/service/test/auth.rs b/src/service/test/auth.rs index 89be073..1927336 100644 --- a/src/service/test/auth.rs +++ b/src/service/test/auth.rs @@ -13,7 +13,18 @@ fn validate_cookies(response: &Response) { .iter() .map(|c| Cookie::parse(c.to_str().unwrap()).unwrap()) .collect(); - assert!(cookies.iter().any(|c| c.name() == dto::COOKIE_SESSION)); + let session = cookies + .iter() + .find_map(|c| { + if c.name() == dto::COOKIE_SESSION { + Some(c.value()) + } else { + None + } + }) + .unwrap(); + assert_ne!(session, TEST_USERNAME); + assert_ne!(session, TEST_USERNAME_ADMIN); assert!(cookies.iter().any(|c| c.name() == dto::COOKIE_USERNAME)); assert!(cookies.iter().any(|c| c.name() == dto::COOKIE_ADMIN)); }