backend barebone done, big chunk of work done

server/internal/auth/refresh_test.go

@@ -0,0 +1,39 @@
+// Package auth_test tests refresh token generation and hashing.
+package auth_test
+
+import (
+	"testing"
+
+	"messenger/internal/auth"
+)
+
+func TestGenerateAndHash(t *testing.T) {
+	raw, hash, err := auth.GenerateRefreshToken()
+	if err != nil {
+		t.Fatalf("GenerateRefreshToken error: %v", err)
+	}
+	if raw == hash {
+		t.Fatal("raw and hash should differ")
+	}
+	if auth.HashRefreshToken(raw) != hash {
+		t.Fatal("HashRefreshToken mismatch")
+	}
+}
+
+func TestGenerateRandomness(t *testing.T) {
+	r1, _, _ := auth.GenerateRefreshToken()
+	r2, _, _ := auth.GenerateRefreshToken()
+	if r1 == r2 {
+		t.Fatal("expected two different raw tokens")
+	}
+}
+
+func TestRawLength(t *testing.T) {
+	raw, _, err := auth.GenerateRefreshToken()
+	if err != nil {
+		t.Fatalf("GenerateRefreshToken error: %v", err)
+	}
+	if len(raw) != 64 {
+		t.Fatalf("expected raw length 64, got %d", len(raw))
+	}
+}