tftsr-devops_investigation/tests/unit/settingsStore.test.ts
Shaun Arman 281e676ad1 fix(security): harden secret handling and audit integrity
Remove high-risk defaults and tighten data handling across auth, storage, IPC, provider calls, and capabilities so sensitive data is better protected by default. Also update README/wiki security guidance and add targeted tests for the new hardening behaviors.

Made-with: Cursor
2026-04-04 23:37:05 -05:00

55 lines
1.8 KiB
TypeScript

import { describe, it, expect, beforeEach } from "vitest";
import { useSettingsStore } from "@/stores/settingsStore";
import type { ProviderConfig } from "@/lib/tauriCommands";
const mockProvider: ProviderConfig = {
name: "openai",
api_url: "https://api.openai.com/v1",
api_key: "sk-test-key",
model: "gpt-4o",
};
describe("Settings Store", () => {
beforeEach(() => {
localStorage.clear();
useSettingsStore.setState({
theme: "dark",
ai_providers: [],
active_provider: undefined,
default_provider: "ollama",
default_model: "llama3.2:3b",
ollama_url: "http://localhost:11434",
});
});
it("adds a provider", () => {
useSettingsStore.getState().addProvider(mockProvider);
expect(useSettingsStore.getState().ai_providers).toHaveLength(1);
expect(useSettingsStore.getState().ai_providers[0].name).toBe("openai");
});
it("removes a provider", () => {
useSettingsStore.getState().addProvider(mockProvider);
useSettingsStore.getState().removeProvider(0);
expect(useSettingsStore.getState().ai_providers).toHaveLength(0);
});
it("updates a provider", () => {
useSettingsStore.getState().addProvider(mockProvider);
useSettingsStore.getState().updateProvider(0, { ...mockProvider, model: "gpt-4o-mini" });
expect(useSettingsStore.getState().ai_providers[0].model).toBe("gpt-4o-mini");
});
it("toggles theme", () => {
useSettingsStore.getState().setTheme("light");
expect(useSettingsStore.getState().theme).toBe("light");
});
it("does not persist API keys to localStorage", () => {
useSettingsStore.getState().addProvider(mockProvider);
const raw = localStorage.getItem("tftsr-settings");
expect(raw).toBeTruthy();
expect(raw).not.toContain("sk-test-key");
});
});