uselesskey-token

Token-shaped fixtures for tests, built on uselesskey-core.

Generates deterministic or random token strings so authorization code paths can be tested without committing secret-looking blobs.

Token specification, base62, shape, and negative-token internals are owned by this crate under uselesskey_token::srp::*; users should normally import TokenSpec, NegativeToken, TokenFactoryExt, and TokenFixture from the crate root or from the uselesskey facade.

Part of the uselesskey workspace. Use the facade crate for the simplest experience, or depend on this crate directly for minimal compile time.

What It Provides

• API-key style tokens: uk_test_<base62>
• Opaque bearer tokens: base64url data
• OAuth access tokens in JWT shape: header.payload.signature
• Scanner-safe negative token shapes for parser and validator error paths

Usage

use uselesskey_core::Factory;
use uselesskey_token::{NegativeToken, TokenFactoryExt, TokenSpec};

let fx = Factory::random();

let api_key = fx.token("billing", TokenSpec::api_key());
let bearer = fx.token("gateway", TokenSpec::bearer());
let oauth = fx.token("issuer", TokenSpec::oauth_access_token());

assert!(api_key.value().starts_with("uk_test_"));
assert!(bearer.authorization_header().starts_with("Bearer "));
assert_eq!(oauth.value().split('.').count(), 3);

let expired = oauth.negative_value(NegativeToken::ExpiredClaims);
let near_miss_api_key = api_key.negative_value(NegativeToken::NearMissApiKey);

assert_eq!(expired.split('.').count(), 3);
assert!(near_miss_api_key.starts_with("uk_tset_"));
assert!(!near_miss_api_key.starts_with("uk_test_"));

Deterministic Mode

use uselesskey_core::{Factory, Seed};
use uselesskey_token::{TokenFactoryExt, TokenSpec};

let seed = Seed::from_env_value("test-seed").unwrap();
let fx = Factory::deterministic(seed);

// Same seed + label + spec = same token
let t1 = fx.token("billing", TokenSpec::api_key());
let t2 = fx.token("billing", TokenSpec::api_key());
assert_eq!(t1.value(), t2.value());

License

Licensed under either of Apache License, Version 2.0 or MIT license at your option.

See the uselesskey crate for full documentation.