3 ms·
Better yet, basic unit tests that verify passed and failed authentication of test accounts. They should run before and after each code deploy (among other unit
by bryanallen22 15y ago
Better yet, basic unit tests that verify passed and failed authentication of test accounts. They should run before and after each code deploy (among other unit tests).
It's very disconcerting that they don't seem to be doing this.
- tptacek 15y agoUnit tests are a good thing, but could miss problems that crop up only in production; for instance, if they delegated authentication to another server, or if something got deployed out-of-process.
- brown9-2 15y agoI don't like to be pedantic but code that tests multiple components and how they interact together aren't really "unit tests" anymore since they are testing more than one unit - it's pretty reasonable to assume that an authentication system is comprised of many modules / classes / etc.
- bryanallen22 15y agoGood point. It still shouldn't even be possible to deploy without some basic sanity tests. I'd put authentication very high on that list.