Initial commit: scadaproj umbrella — sister-project index, auth component normalization (design + GAPS), and the built ZB.MOM.WW.Auth shared library (0.1.0, flattened in).

2026-06-01 03:59:23 -04:00
commit 37e23cf9f2
73 changed files with 6836 additions and 0 deletions
@@ -0,0 +1,77 @@
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Http;
+using ZB.MOM.WW.Auth.AspNetCore;
+
+namespace ZB.MOM.WW.Auth.AspNetCore.Tests;
+
+public class ZbCookieDefaultsTests
+{
+    [Fact]
+    public void Apply_SetsHardenedCookieFlags()
+    {
+        var options = new CookieAuthenticationOptions();
+
+        ZbCookieDefaults.Apply(options);
+
+        Assert.True(options.Cookie.HttpOnly);
+        Assert.Equal(SameSiteMode.Strict, options.Cookie.SameSite);
+        Assert.True(options.SlidingExpiration);
+    }
+
+    [Fact]
+    public void Apply_UsesSuppliedIdleTimeout()
+    {
+        var options = new CookieAuthenticationOptions();
+        var idle = TimeSpan.FromMinutes(12);
+
+        ZbCookieDefaults.Apply(options, idleTimeout: idle);
+
+        Assert.Equal(idle, options.ExpireTimeSpan);
+    }
+
+    [Fact]
+    public void Apply_DefaultsToDefaultIdleTimeout_WhenNotSupplied()
+    {
+        var options = new CookieAuthenticationOptions();
+
+        ZbCookieDefaults.Apply(options);
+
+        Assert.Equal(ZbCookieDefaults.DefaultIdleTimeout, options.ExpireTimeSpan);
+    }
+
+    [Fact]
+    public void Apply_RequireHttpsTrue_SetsSecurePolicyAlways()
+    {
+        var options = new CookieAuthenticationOptions();
+
+        ZbCookieDefaults.Apply(options, requireHttps: true);
+
+        Assert.Equal(CookieSecurePolicy.Always, options.Cookie.SecurePolicy);
+    }
+
+    [Fact]
+    public void Apply_RequireHttpsFalse_SetsSecurePolicySameAsRequest()
+    {
+        var options = new CookieAuthenticationOptions();
+
+        ZbCookieDefaults.Apply(options, requireHttps: false);
+
+        Assert.Equal(CookieSecurePolicy.SameAsRequest, options.Cookie.SecurePolicy);
+    }
+
+    [Fact]
+    public void Apply_DefaultsRequireHttpsToAlways()
+    {
+        var options = new CookieAuthenticationOptions();
+
+        ZbCookieDefaults.Apply(options);
+
+        Assert.Equal(CookieSecurePolicy.Always, options.Cookie.SecurePolicy);
+    }
+
+    [Fact]
+    public void Apply_NullOptions_Throws()
+    {
+        Assert.Throws<ArgumentNullException>(() => ZbCookieDefaults.Apply(null!));
+    }
+}