dev_agentandClaude Opus 5.5
f1e7503f94
Require MEALQUEST_VAPID_PUBLIC_KEY, MEALQUEST_VAPID_PRIVATE_KEY_FILE and
MEALQUEST_VAPID_SUBJECT at boot. Both keys are unpadded base64url P-256
keys, the encoding webpush-go reads; boot derives the public point from the
private key and refuses a pair that does not match. The subject must be
mailto:<address> or an https:// URL.
internal/push stores subscriptions by endpoint: GET
/api/v1/push/vapid-public-key serves only the public key, POST
/api/v1/push/subscriptions upserts {endpoint, keys.p256dh, keys.auth,
user_agent}, and DELETE removes by endpoint, answering 204 whether or not
it was stored. cmd/vapidgen prints a new key pair. deploy/compose.yaml
mounts the vapid_private_key secret.
Maestro task e8a7b1f4-327a-478b-88c7-5d265afda153.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
47 lines
1.3 KiB
Go
47 lines
1.3 KiB
Go
package main
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
|
|
"code.cubecraftlabs.com/Maniacs_Mansion/Meal-Quest/internal/config"
|
|
"code.cubecraftlabs.com/Maniacs_Mansion/Meal-Quest/internal/vapid"
|
|
)
|
|
|
|
// TestRunPrintsAMatchingPair checks the output shape and that the printed
|
|
// private key line is a key config.Load accepts for the printed public key.
|
|
func TestRunPrintsAMatchingPair(t *testing.T) {
|
|
t.Parallel()
|
|
var out strings.Builder
|
|
if err := run(&out); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
lines := strings.Split(strings.TrimSuffix(out.String(), "\n"), "\n")
|
|
if len(lines) != 4 || !strings.HasPrefix(lines[0], "# ") || !strings.HasPrefix(lines[2], "# ") {
|
|
t.Fatalf("output = %q, want comment, public key, comment, private key", out.String())
|
|
}
|
|
public, ok := strings.CutPrefix(lines[1], config.EnvVAPIDPublicKey+"=")
|
|
if !ok {
|
|
t.Fatalf("public key line = %q, want %s=<key>", lines[1], config.EnvVAPIDPublicKey)
|
|
}
|
|
pub, err := vapid.ParsePublicKey(public)
|
|
if err != nil {
|
|
t.Fatalf("printed public key: %v", err)
|
|
}
|
|
priv, err := vapid.ParsePrivateKey(lines[3])
|
|
if err != nil {
|
|
t.Fatalf("printed private key: %v", err)
|
|
}
|
|
if err := vapid.CheckPair(pub, priv); err != nil {
|
|
t.Error(err)
|
|
}
|
|
|
|
var second strings.Builder
|
|
if err := run(&second); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if second.String() == out.String() {
|
|
t.Error("two runs printed the same key pair")
|
|
}
|
|
}
|