add failing test for #40

tj · Feb 17, 2022 · 2e896ce · 2e896ce
1 parent 6a9a1a0
commit 2e896ce
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/test/index.js b/test/index.js
@@ -20,4 +20,14 @@ describe('.unsign(val, secret)', function(){
     cookie.unsign(val, 'tobiiscool').should.equal('hello');
     cookie.unsign(val, 'luna').should.be.false();
   })
+  it('should reject malformed cookies', function(){
+    var pwd = 'actual sekrit password';
+    cookie.unsign('fake unsigned data', pwd).should.be.false();
+
+    var val = cookie.sign('real data', pwd);
+    cookie.unsign('garbage'+val, pwd).should.be.false();
+    cookie.unsign('garbage.'+val, pwd).should.be.false();
+    cookie.unsign(val+'.garbage', pwd).should.be.false();
+    cookie.unsign(val+'garbage', pwd).should.be.false();
+  })
 })