Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

test(cli): cover GitHub token verification at the HTTP boundary

Open Beginner friendly
#467 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
76/100
Issue type
Feature
Clarity
Clearly specified
Activity status
Active
Tech stack
github, typescript

Research direction

Start at GhTokenAdapter.verifyToken and the HTTP-client port it uses. Add isolated tests for successful, rejected, malformed, and non-success GitHub responses, confirming the expected login or documented authentication error without exposing the supplied token; use only the port fake or mock, never GitHub or a host CLI.

Written by the indexing model from the issue text.

Description

Context

The July audit grouped global command orchestration, plugin restore and authentication coverage in one issue. PR #795 replaces that command topology and already adds focused coverage for the surviving flows:

  • status is retired and update is split by AI/IDE scope.
  • doctor, status and restore behavior have dedicated tests, including the empty-project health regression.
  • AuthProviderAdapter covers stored-token and external-provider login/status paths.

The remaining uncovered boundary is GhTokenAdapter.verifyToken: it turns a GitHub HTTP response into an authenticated login or an authentication failure.

Target

Add isolated tests for GhTokenAdapter using its HTTP-client port. Do not call GitHub and do not invoke a host CLI.

Acceptance criteria

  • A successful mocked GitHub user response returns the expected login.
  • A rejected, malformed, or non-success response becomes the documented authentication error.
  • The request carries the supplied token only in the authorization mechanism required by the adapter; neither assertion failures nor errors expose it.
  • Tests use the HTTP port fake/mock, never a live GitHub request.

Boundary

Do not duplicate AuthProviderAdapter coverage, restore E2E scenarios, or the retired *AllUseCase topology. This is one HTTP-adapter contract.

Dominant language
TypeScript
Stars
481
Forks
45
Avg merge
14h 27m
Merged PRs (30d)
111

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from ai-driven-dev/framework

All issues in ai-driven-dev/framework

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.