release: PicHost v1.0.0

Multi-user image hosting with RBAC, upload preferences, and admin settings.

server/utils/auth.test.ts

@@ -0,0 +1,22 @@
+import { describe, expect, it } from 'vitest'
+import { hashPassword, isValidPassword, isValidUsername, verifyPassword } from './auth'
+
+describe('auth password', () => {
+  it('hashes and verifies a password', () => {
+    const hash = hashPassword('test-password-123')
+    expect(hash.startsWith('scrypt$')).toBe(true)
+    expect(verifyPassword('test-password-123', hash)).toBe(true)
+    expect(verifyPassword('wrong-password', hash)).toBe(false)
+  })
+
+  it('rejects invalid passwords', () => {
+    expect(isValidPassword('short')).toBe(false)
+    expect(isValidPassword('long-enough')).toBe(true)
+  })
+
+  it('validates usernames', () => {
+    expect(isValidUsername('ab')).toBe(false)
+    expect(isValidUsername('user_1')).toBe(true)
+    expect(isValidUsername('bad name')).toBe(false)
+  })
+})