package security

import "testing"

func TestPasswordHashRoundTrip(t *testing.T) {
	hash, salt, iterations, err := HashPassword("correct-horse-42")
	if err != nil {
		t.Fatal(err)
	}
	if !VerifyPassword("correct-horse-42", hash, salt, iterations) {
		t.Fatal("correct password was rejected")
	}
	if VerifyPassword("wrong-password-42", hash, salt, iterations) {
		t.Fatal("wrong password was accepted")
	}
}

func TestPasswordPolicy(t *testing.T) {
	for _, password := range []string{"short1", "onlyletterslong", "123456789012345"} {
		if err := ValidatePassword(password); err == nil {
			t.Fatalf("password %q unexpectedly passed policy", password)
		}
	}
}