feat: complete V1 phases 0-7

2026-08-12 14:35:12 +08:00
commit c3dd9be674
311 changed files with 38750 additions and 0 deletions
@@ -0,0 +1,21 @@
+import { describe, expect, it } from 'vitest';
+
+import type { PrismaService } from '../database/prisma.service';
+import type { SensitiveDataService } from '../security/sensitive-data.service';
+import { AuditService } from './audit.service';
+
+describe('AuditService metadata policy', () => {
+  const service = new AuditService({} as PrismaService, {} as SensitiveDataService);
+
+  it('allows non-sensitive action metadata', () => {
+    expect(service.safeMetadata({ reasonCode: 'INVALID_CREDENTIALS', attempt: 2 })).toEqual({
+      reasonCode: 'INVALID_CREDENTIALS',
+      attempt: 2,
+    });
+  });
+
+  it('rejects sensitive metadata keys', () => {
+    expect(() => service.safeMetadata({ password: 'never-store-this' })).toThrow(/not allowed/);
+    expect(() => service.safeMetadata({ openid: 'never-store-this' })).toThrow(/not allowed/);
+  });
+});