# test(coreapi): mark cross-juris transport tests parallel

`b82a741`→[main](/content/gh/entireio/cli/commits/main/index.html)·

toothbrush·1mo ago·1 file·+10 added/-0 removed

All tests own their httptest servers/transports with no process-global state, so they conform to the repo's t.Parallel() convention.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

## Sessions

41b4654948ebView transcript

## Changes

1
  
- internal/coreapi
  
  
  - Mcross_juris_transport_test.go+10

```
92 unmodified lines

...
```

// TestRoundTripper_PassThrough: a 2xx is returned unchanged.
func TestRoundTripper_PassThrough(t *testing.T) {
	t.Parallel()
	srv := newCrossJurisTestServer(t, func(s *crossJurisTestServer, w http.ResponseWriter, r *http.Request) {
		s.record(r)
		w.WriteHeader(http.StatusOK)
	})
}

// TestRoundTripper_421FollowsToHomeCore: 421 with home_core_url is
// followed; the home core gets the original bearer on the first hop.
func TestRoundTripper_421FollowsToHomeCore(t *testing.T) {
	t.Parallel()
	homeCore := newCrossJurisTestServer(t, func(s *crossJurisTestServer, w http.ResponseWriter, r *http.Request) {
		s.record(r)
		w.WriteHeader(http.StatusOK)
	})
}

// The transport must still recover by exchanging the original login JWT
// at the home core's same-origin /oauth/token and retrying.
func TestRoundTripper_421ThenBareUnauthorizedProactiveExchange(t *testing.T) {
	t.Parallel()
	homeExchangeHits := atomic.Int32{}
	var homeExchangeSubjects, homeAPIAuths authRecorder
	homeCore := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		s.record(r)
		w.WriteHeader(http.StatusOK)
	}))
}

// TestRoundTripper_BareUnauthorizedNoRedirectPassesThrough: a bare 401
// on a non-redirected request is a genuine failure — no exchange.
func TestRoundTripper_BareUnauthorizedNoRedirectPassesThrough(t *testing.T) {
	t.Parallel()
	exchangeHits := atomic.Int32{}
	srv := newCrossJurisTestServer(t, func(s *crossJurisTestServer, w http.ResponseWriter, r *http.Request) {
		if r.URL.Path == oauthTokenPath {
		
		}
	})
}

// TestRoundTripper_401ExchangeAndRetry covers the structured-hint path.
func TestRoundTripper_401ExchangeAndRetry(t *testing.T) {
	t.Parallel()
	exchangeHits := atomic.Int32{}
	apiHits := atomic.Int32{}
	var apiAuths authRecorder
}

// TestRoundTripper_Rejects421OffFederation: a 421 to a host not in the
// responding core's federation manifest is not followed.
func TestRoundTripper_Rejects421OffFederation(t *testing.T) {
	t.Parallel()
	homeHits := atomic.Int32{}
	homeCore := newCrossJurisTestServer(t, func(s *crossJurisTestServer, w http.ResponseWriter, r *http.Request) {
		homeHits.Add(1)
	})
}

// TestRoundTripper_RejectsOffOrigin401ExchangeURL: a hint pointing
// token_exchange_url off-origin must not leak the JWT.
func TestRoundTripper_RejectsOffOrigin401ExchangeURL(t *testing.T) {
	t.Parallel()
	attackerHits := atomic.Int32{}
	attacker := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
		attackerHits.Add(1)
	}))
}

// TestRoundTripper_BodyReplayedOnRetry: a retried request replays its body.
func TestRoundTripper_BodyReplayedOnRetry(t *testing.T) {
	t.Parallel()
	const payload = `{"provider":"github","owner":"acme","repo":"widget"}`
	homeCore := newCrossJurisTestServer(t, func(s *crossJurisTestServer, w http.ResponseWriter, r *http.Request) {
		s.record(r)
	})
}

// TestValidateExchangeURL pins the scheme / same-origin rules.
func TestValidateExchangeURL(t *testing.T) {
	t.Parallel()
	mustParse := func(raw string) *url.URL {
		u, err := url.Parse(raw)
		if err != nil {
		
		}
	}
}

// TestCacheExpiresAfterTTL: expired entries are evicted on lookup.
func TestCacheExpiresAfterTTL(t *testing.T) {
	t.Parallel()
	rt := transportFor()
	rt.storeToken("https://example.test", "tok")
	if _, ok := rt.lookupToken("https://example.test"); !ok {
	
	}
}