sneak 2c51074294 Red: mock server must serialize empty 2FA fields like Go does ...

The museum server's EmailAuthorizationResponse declares
passkeySessionID, accountsUrl, twoFactorSessionID, and
twoFactorSessionIDV2 without `omitempty`, so Go always sends them,
as "" when unset. The previous mock omitted the unset fields
entirely, which let the ?? -based dispatch pass in tests while the
real server's "" defeated it and dual-2FA logins fell through to
the unsupported passkey branch.

2026-06-10 11:25:25 -07:00

..

login.test.ts

Red: mock server must serialize empty 2FA fields like Go does

2026-06-10 11:25:25 -07:00

unwrap.test.ts

Fix auth token encoding: use URL-safe base64 WITH padding

2026-05-13 17:10:04 -07:00