Function TestHamrpassRejectsControlChars

internal/tui/tui_test.go:3049–3079

TestHamrpassRejectsControlChars: a key with an embedded escape / NUL / DEL must be rejected by hamrpassValidate, not persisted, else every dial-out errors with net/http's cryptic "invalid header field value for Authorization". Real hamrpass keys are ASCII-printable.

(t *testing.T)

// TestHamrpassRejectsTooShort: a key under hamrpassMinKeyLen is refused
// without touching the profile or the active selection.
func TestHamrpassRejectsTooShort(t *testing.T) {
	m := newTestModel(t, func(http.ResponseWriter, *http.Request) {})
	beforeActive := m.cfg.Active
	beforeKey := m.cfg.Models["hamrpass"].Key
	m2, _ := m.runSlash("/hamrpass abc")
	final := m2.(Model)
	if final.cfg.Active != beforeActive {
		t.Fatalf("active changed on rejected key: %q", final.cfg.Active)
	}
	if final.cfg.Models["hamrpass"].Key != beforeKey {
		t.Fatalf("rejected key was stored: %q", final.cfg.Models["hamrpass"].Key)
	}
	out := stripANSI(final.scroll.String())
	// New wording stays consistent with the popover hint:
	// "N/16 chars · keep typing".
	if !strings.Contains(out, "/16 chars") || !strings.Contains(out, "keep typing") {
		t.Fatalf("expected length hint in scrollback:\n%s", out)
	}
}

// TestHamrpassRejectsControlChars: a key with an embedded escape / NUL / DEL must
// be rejected by hamrpassValidate, not persisted, else every dial-out errors
// with net/http's cryptic "invalid header field value for Authorization". Real
// hamrpass keys are ASCII-printable.
func TestHamrpassRejectsControlChars(t *testing.T) {
	cases := map[string]string{
		"NUL":         "hp_secret_key_with\x00null",
		"ESC":         "hp_secret_key_with\x1bescape",
		"DEL":         "hp_secret_key_with\x7fdel",
		"non-ASCII":   "hp_secret_key_with_ümlaut123",
		"raw newline": "hp_key_one\nhp_key_two_X12",
	}
	for name, badKey := range cases {