diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-19 14:48:31 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-19 14:48:31 +0300 |
| commit | 0d737e7585a7b6876679b266e677675f7787ff24 (patch) | |
| tree | 0d1c1210d1072afb7b691bf68df54f8d90a7b889 /player-server/internal/auth/token_test.go | |
| parent | 622827ccb4c23915aeccaa39d3e8152dd2955afb (diff) | |
Return error from tokenManager.Generate instead of panicking
A crypto/rand.Read failure is a process-level emergency, but the previous
implementation aborted the entire server. Propagate the error through
the TokenManager interface so callers (CreateAPIToken) can surface it
via the normal HTTP 500 path instead of crashing.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Diffstat (limited to 'player-server/internal/auth/token_test.go')
| -rw-r--r-- | player-server/internal/auth/token_test.go | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/player-server/internal/auth/token_test.go b/player-server/internal/auth/token_test.go index bf18aa5..a9bddf8 100644 --- a/player-server/internal/auth/token_test.go +++ b/player-server/internal/auth/token_test.go @@ -11,7 +11,10 @@ func TestTokenManager_Generate(t *testing.T) { seen := make(map[string]string) for i := 0; i < 1000; i++ { - plaintext, hash := tm.Generate() + plaintext, hash, err := tm.Generate() + if err != nil { + t.Fatalf("generate token: %v", err) + } if len(plaintext) != tokenByteLength*2 { t.Fatalf("expected plaintext length %d, got %d", tokenByteLength*2, len(plaintext)) } |