uselesskey-token 0.8.0

API key, bearer, and OAuth access-token fixture generator for tests.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

# uselesskey-token

[![Crates.io](https://img.shields.io/crates/v/uselesskey-token.svg)](https://crates.io/crates/uselesskey-token)
[![docs.rs](https://docs.rs/uselesskey-token/badge.svg)](https://docs.rs/uselesskey-token)
[![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT%20OR%20Apache--2.0-blue.svg)](#license)

Token-shaped fixtures for tests, built on `uselesskey-core`.

Generates deterministic or random token strings so authorization code paths can
be tested without committing secret-looking blobs.

Token specification, base62, shape, and negative-token internals are owned by
this crate under `uselesskey_token::srp::*`; users should normally import
`TokenSpec`, `NegativeToken`, `TokenFactoryExt`, and `TokenFixture` from the
crate root or from the `uselesskey` facade.

Part of the [`uselesskey`](https://crates.io/crates/uselesskey) workspace. Use
the facade crate for the simplest experience, or depend on this crate directly
for minimal compile time.

## What It Provides

- API-key style tokens: `uk_test_<base62>`
- Opaque bearer tokens: base64url data
- OAuth access tokens in JWT shape: `header.payload.signature`
- Scanner-safe negative token shapes for parser and validator error paths

## Usage

```rust
use uselesskey_core::Factory;
use uselesskey_token::{NegativeToken, TokenFactoryExt, TokenSpec};

let fx = Factory::random();

let api_key = fx.token("billing", TokenSpec::api_key());
let bearer = fx.token("gateway", TokenSpec::bearer());
let oauth = fx.token("issuer", TokenSpec::oauth_access_token());

assert!(api_key.value().starts_with("uk_test_"));
assert!(bearer.authorization_header().starts_with("Bearer "));
assert_eq!(oauth.value().split('.').count(), 3);

let expired = oauth.negative_value(NegativeToken::ExpiredClaims);
let near_miss_api_key = api_key.negative_value(NegativeToken::NearMissApiKey);

assert_eq!(expired.split('.').count(), 3);
assert!(near_miss_api_key.starts_with("uk_tset_"));
assert!(!near_miss_api_key.starts_with("uk_test_"));
```

### Deterministic Mode

```rust
use uselesskey_core::{Factory, Seed};
use uselesskey_token::{TokenFactoryExt, TokenSpec};

let seed = Seed::from_env_value("test-seed").unwrap();
let fx = Factory::deterministic(seed);

// Same seed + label + spec = same token
let t1 = fx.token("billing", TokenSpec::api_key());
let t2 = fx.token("billing", TokenSpec::api_key());
assert_eq!(t1.value(), t2.value());
```

## License

Licensed under either of [Apache License, Version 2.0](https://www.apache.org/licenses/LICENSE-2.0)
or [MIT license](https://opensource.org/licenses/MIT) at your option.

See the [`uselesskey` crate](https://crates.io/crates/uselesskey) for full
documentation.