github-mirrors/netris-nestri
1
0
Fork 0
mirror of https://github.com/nestriness/nestri.git synced 2026-09-19 17:25:19 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): refuse to send a sign-in code rather than log one

Browse Source 
The rule was "throw when the environment says production, otherwise log
the code and carry on". The deployment sets no such marker, so the
branch that ran was the developer one: every recipient and every usable
sign-in code printed to a retained log, the screen reporting success,
and nobody receiving anything.

That is what a fail-open default costs. The deployment that forgets its
mail settings is exactly the deployment with no marker saying it is a
real one, so it takes the lenient branch precisely when it should not.

Turned around: printing a live code is asked for by name and anything
else is an error, so absence of configuration is a refusal instead of an
assumption. Two settings out of three is also an error now, because it
means somebody is halfway through wiring a provider up and a quiet
fallback would hide the missing half.

Stages anyone else can reach are checked at deploy time, so a missing
setting stops the deploy with the name of the variable it wanted rather
than surfacing later as a person waiting for mail that never comes.
This commit is contained in:
Wanjohi
2026-09-05 09:27:49 +03:00
parent affe1e3c73
commit 2c4e9d9b0b
3 changed files with 142 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

55
apps/auth/test/email.test.ts
View File

@@ -3,16 +3,36 @@ import { describe, expect, test } from 'bun:test';
import { sendVerificationCode } from '../src/email.js';
describe('sending a sign-in code', () => {
test('with nothing configured outside production, it does not block a sign-in', async () => {
await sendVerificationCode({ NODE_ENV: 'development' }, 'ada@example.com', '123456');
test('printing the code to the log has to be asked for by name', async () => {
await sendVerificationCode({ EMAIL_DEV_LOG: 'true' }, 'ada@example.com', '123456');
});
test('with nothing configured in production, it says so instead of pretending', async () => {
// The regression this holds: the previous rule was "throw only when the
// environment says production", which meant a deployment that set no
// marker at all — which is what the real one did — took the developer
// branch and logged live codes. Absence is now a refusal.
test('nothing configured and nothing asked for is a refusal, not a log', async () => {
await expect(sendVerificationCode({}, 'ada@example.com', '123456')).rejects.toThrow(
/not configured/
);
});
test('a variable left holding something other than true does not switch logging on', async () => {
await expect(
sendVerificationCode({ NODE_ENV: 'production' }, 'ada@example.com', '123456')
sendVerificationCode({ EMAIL_DEV_LOG: 'false' }, 'ada@example.com', '123456')
).rejects.toThrow(/not configured/);
});
test('half a mailer is an error rather than a fallback', async () => {
await expect(
sendVerificationCode(
{ EMAIL_SEND_URL: 'https://mail.example.com/send', EMAIL_DEV_LOG: 'true' },
'ada@example.com',
'123456'
)
).rejects.toThrow(/half configured/);
});
test('a configured mailer is called with the address and the code', async () => {
let seen: { url: string; body: any; auth: string | null } | null = null;
const original = globalThis.fetch;
@@ -28,7 +48,6 @@ describe('sending a sign-in code', () => {
try {
await sendVerificationCode(
{
NODE_ENV: 'production',
EMAIL_SEND_URL: 'https://mail.example.com/send',
EMAIL_API_KEY: 'key',
EMAIL_FROM: 'hello@nestri.io'
@@ -47,6 +66,32 @@ describe('sending a sign-in code', () => {
expect(seen!.body.text).toContain('123456');
});
test('a configured mailer sends even when dev logging is on', async () => {
let called = false;
const original = globalThis.fetch;
globalThis.fetch = (async () => {
called = true;
return new Response('{}', { status: 200 });
}) as unknown as typeof fetch;
try {
await sendVerificationCode(
{
EMAIL_SEND_URL: 'https://mail.example.com/send',
EMAIL_API_KEY: 'key',
EMAIL_FROM: 'hello@nestri.io',
EMAIL_DEV_LOG: 'true'
},
'ada@example.com',
'123456'
);
} finally {
globalThis.fetch = original;
}
expect(called).toBe(true);
});
test('a refusal from the mailer is not swallowed', async () => {
const original = globalThis.fetch;
globalThis.fetch = (async () =>