2c7fb54956
* Config: fail closed invalid config loads * CLI: keep diagnostics on explicit best-effort config * Tests: cover invalid config best-effort diagnostics * Changelog: note invalid config fail-closed fix * Status: pass best-effort config through status-all gateway RPCs * CLI: pass config through gateway secret RPC * CLI: skip plugin loading from invalid config * Tests: align daemon token drift env precedence
47 lines
1.3 KiB
TypeScript
47 lines
1.3 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import type { OpenClawConfig } from "../../config/config.js";
|
|
import { resolveGatewayTokenForDriftCheck } from "./gateway-token-drift.js";
|
|
|
|
describe("resolveGatewayTokenForDriftCheck", () => {
|
|
it("prefers persisted config token over shell env", () => {
|
|
const token = resolveGatewayTokenForDriftCheck({
|
|
cfg: {
|
|
gateway: {
|
|
mode: "local",
|
|
auth: {
|
|
token: "config-token",
|
|
},
|
|
},
|
|
} as OpenClawConfig,
|
|
env: {
|
|
OPENCLAW_GATEWAY_TOKEN: "env-token",
|
|
} as NodeJS.ProcessEnv,
|
|
});
|
|
|
|
expect(token).toBe("config-token");
|
|
});
|
|
|
|
it("does not fall back to caller env for unresolved config token refs", () => {
|
|
expect(() =>
|
|
resolveGatewayTokenForDriftCheck({
|
|
cfg: {
|
|
secrets: {
|
|
providers: {
|
|
default: { source: "env" },
|
|
},
|
|
},
|
|
gateway: {
|
|
mode: "local",
|
|
auth: {
|
|
token: { source: "env", provider: "default", id: "OPENCLAW_GATEWAY_TOKEN" },
|
|
},
|
|
},
|
|
} as OpenClawConfig,
|
|
env: {
|
|
OPENCLAW_GATEWAY_TOKEN: "env-token",
|
|
} as NodeJS.ProcessEnv,
|
|
}),
|
|
).toThrow(/gateway\.auth\.token/i);
|
|
});
|
|
});
|