test: harden package boundaries and audit budgets

2026-08-24 12:05:20 +05:30
parent 613ff7ae5b
commit b3c93e9b18
12 changed files with 115 additions and 17 deletions
@@ -47,4 +47,17 @@ describe("CAPTCHA helper boundaries", () => {
    ).toEqual({ success: true, provider: "custom", action: "login" });
    expect(captchaContext({ locals: { captcha: "forged" } } as never)).toBeNull();
  });
+
+  test("does not convert provider transport failures into successful verification", async () => {
+    const provider = {
+      name: "custom" as const,
+      client: { responseField: "captchaToken" },
+      verify: async () => {
+        throw new Error("provider timeout");
+      },
+    };
+    await expect(
+      verifyCaptchaOrThrow(provider, { providerToken: "x", action: "checkout" }),
+    ).rejects.toThrow("provider timeout");
+  });
 });