(t *testing.T)
| 93 | } |
| 94 | |
| 95 | func TestVerifyRejectsMissingSignature(t *testing.T) { |
| 96 | s := NewSigner("test-secret") |
| 97 | h := AuthHeaders{ |
| 98 | HeaderVerified: "true", |
| 99 | HeaderSender: "alice@example.com", |
| 100 | HeaderEntityType: "human", |
| 101 | HeaderTimestamp: time.Now().UTC().Format(time.RFC3339), |
| 102 | } |
| 103 | |
| 104 | if s.Verify(h) { |
| 105 | t.Error("expected Verify to reject missing signature") |
| 106 | } |
| 107 | } |
| 108 | |
| 109 | func TestVerifyWithMaxAge(t *testing.T) { |
| 110 | s := NewSigner("test-secret") |