improved security

2026-06-24 09:37:08 +02:00
parent 623fe0f464
commit b02f264b23
5 changed files with 65 additions and 7 deletions
--- a/tests/Integration/TokenTest.php
+++ b/tests/Integration/TokenTest.php
@ -20,6 +20,11 @@ final class TokenTest extends QdbTestCase
        $rec = token_get_record($token);
        $this->assertNotNull($rec);
        $this->assertSame('admin', $rec['role']);
+        [$pdo, $tmpDb, $lockFp] = qdb_open(false);
+        $stored = $pdo->query('SELECT token FROM session LIMIT 1')->fetchColumn();
+        qdb_discard($tmpDb, $lockFp);
+        $this->assertSame(token_storage_key($token), $stored);
+        $this->assertNotSame($token, $stored);

        token_revoke($token);
        $this->assertNull(token_get_record($token));