hermes-hub/tests/test_web_api_security.py
Hermes Team e42f262b6d feat(A15): веб-API, общий ActionExecutor и порт путей на Linux
Работа A15 выполнена, но не закоммичена: git в его окружении был
недоступен. Восстановлена ревьюером из рабочего каталога.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-23 19:45:13 +07:00

39 lines
1.2 KiB
Python

import pytest
from antigravity_provider.router.web.server import sanitize_snapshot
def test_sanitize_snapshot_removes_secrets():
raw_snap = {
"generation": 1,
"profiles_by_provider": {
"codex": [
{
"profile_id": "test",
"access_token": "secret123",
"refresh_token": "secret456",
"safe_field": "hello"
}
]
},
"quotas": {
"api_key": "some_key",
"usage": 10,
"jwt_token": "eyJhb..."
},
"safe_list": [
{"safe_key": "hidden", "public": "visible"}
]
}
clean_snap = sanitize_snapshot(raw_snap)
assert "access_token" not in clean_snap["profiles_by_provider"]["codex"][0]
assert "refresh_token" not in clean_snap["profiles_by_provider"]["codex"][0]
assert "safe_field" in clean_snap["profiles_by_provider"]["codex"][0]
assert "api_key" not in clean_snap["quotas"]
assert "jwt_token" not in clean_snap["quotas"]
assert "usage" in clean_snap["quotas"]
assert "safe_key" in clean_snap["safe_list"][0]
assert "public" in clean_snap["safe_list"][0]