1 files changed, 65 insertions, 0 deletions
diff --git a/internal/authkeys/store_test.go b/internal/authkeys/store_test.go
new file mode 100644
index 0000000..8331a5b
--- /dev/null
+++ b/internal/authkeys/store_test.go
@@ -0,0 +1,65 @@
+package authkeys
+
+import (
+	"context"
+	"path/filepath"
+	"testing"
+)
+
+func TestCreateVerifyReplace(t *testing.T) {
+	ctx := context.Background()
+	path := filepath.Join(t.TempDir(), "auth.db")
+	s, err := OpenStore(ctx, path)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer s.Close()
+	if err := s.EnsureSchema(ctx); err != nil {
+		t.Fatal(err)
+	}
+	n, err := s.KeyCount(ctx)
+	if err != nil || n != 0 {
+		t.Fatalf("KeyCount got %d err %v", n, err)
+	}
+	tok1, err := s.CreateKey(ctx, "host-a")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if tok1 == "" {
+		t.Fatal("empty token")
+	}
+	n, err = s.KeyCount(ctx)
+	if err != nil || n != 1 {
+		t.Fatalf("KeyCount after create got %d err %v", n, err)
+	}
+	ok, err := s.Verify(ctx, "host-a", tok1)
+	if err != nil || !ok {
+		t.Fatalf("Verify tok1 got %v ok=%v", err, ok)
+	}
+	ok, err = s.Verify(ctx, "host-a", "wrong")
+	if err != nil || ok {
+		t.Fatalf("Verify wrong got %v ok=%v", err, ok)
+	}
+	tok2, err := s.CreateKey(ctx, "host-a")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if tok2 == tok1 {
+		t.Fatal("expected new token after replace")
+	}
+	ok, err = s.Verify(ctx, "host-a", tok1)
+	if err != nil || ok {
+		t.Fatalf("old token should fail got %v ok=%v", err, ok)
+	}
+	ok, err = s.Verify(ctx, "host-a", tok2)
+	if err != nil || !ok {
+		t.Fatalf("new token should work got %v ok=%v", err, ok)
+	}
+}
+
+func TestDefaultPath(t *testing.T) {
+	p := DefaultPath("/var/stats")
+	if filepath.Base(p) != "goprecords-auth.db" {
+		t.Fatalf("got %q", p)
+	}
+}