feat: Integrate CIE authentication flow

2026-06-17 11:01:28 +00:00
parent 8a94f36015
commit 917a12e3a8
20 changed files with 946 additions and 15 deletions
@@ -5,6 +5,7 @@

 #include "common/GeoJson.h"
 #include "common/Crypto.h"
+#include "common/Http.h"
 #include "common/Validation.h"
 #include "repositories/Sql.h"

@@ -76,6 +77,24 @@ DROGON_TEST(SqlScalarSerializationKeepsTypes)
    CHECK(json["phone"].isString());
 }

+DROGON_TEST(CryptoHmacIsDeterministic)
+{
+    const auto digest = visione::crypto::hmacSha256Hex("secret", "{\"a\":1}");
+    CHECK(digest == "AA9E2E3575F5D7098B6CACCDB4486EA647EFDC3E2CA6A5CEE762FCAFD14E3F14");
+    CHECK(visione::crypto::constantTimeEquals(digest, digest));
+    CHECK(!visione::crypto::constantTimeEquals(digest, "different"));
+}
+
+DROGON_TEST(ParseJsonBodyRejectsInvalidPayload)
+{
+    const auto parsed = visione::http::parseJsonBody("{\"ok\":true}");
+    CHECK(parsed.isObject());
+    CHECK(parsed["ok"].asBool());
+
+    const auto invalid = visione::http::parseJsonBody("{oops");
+    CHECK(invalid.isNull());
+}
+
 DROGON_TEST(GeoJsonMatchesPointInsidePolygon)
 {
    Json::Value polygon;