fix: integrate hardened APT security boundary

2026-08-19 21:36:24 +00:00
parent b6df6f1a66
commit 2f492b662d
14 changed files with 1113 additions and 1730 deletions
@@ -129,7 +129,7 @@ test('Send to APT uses the paired secret header and exact endpoint', async () =>
  assert.equal(harness.fetchCalls.length, 1);
  const [url, request] = harness.fetchCalls[0];
  assert.equal(url, 'http://127.0.0.1:18247/cookie');
-  assert.equal(request.headers['X-APT-Pairing-Secret'], 'A'.repeat(43));
+  assert.equal(request.headers['X-APT-Pairing'], 'A'.repeat(43));
  assert.deepEqual(JSON.parse(request.body), {
    deploymentUrl: 'https://customer.avasecurity.com',
    cookieValue: 'sensitive-va-token'