From 36362e369d3812ae5df15edd57f1ae0d4c8b55e1 Mon Sep 17 00:00:00 2001
From: viktormarinho <viktormpcs@gmail.com>
Date: Mon, 21 Sep 2026 15:13:08 -0300
Subject: [PATCH] test(github): pin the clock for repo grant refresh tests

---
 github/server/lib/repo-grant.test.ts | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/github/server/lib/repo-grant.test.ts b/github/server/lib/repo-grant.test.ts
index e9768507..8cd14e66 100644
--- a/github/server/lib/repo-grant.test.ts
+++ b/github/server/lib/repo-grant.test.ts
@@ -17,6 +17,8 @@ import {
 } from "./repo-grant-store.ts";
 import type { Env } from "../types/env.ts";
 
+const TEST_NOW = Date.parse("2026-06-10T00:00:00.000Z");
+
 function fakeKV() {
   const store = new Map<string, string>();
   return {
@@ -289,6 +291,7 @@ describe("refreshRepoGrant — request validation", () => {
   test("missing grant_type or refresh_token → 400 invalid_request", async () => {
     const store = getRepoGrantStore(fakeKV());
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: null,
       refreshToken: null,
@@ -305,6 +308,7 @@ describe("refreshRepoGrant — request validation", () => {
   test("unsupported grant_type → 400 unsupported_grant_type", async () => {
     const store = getRepoGrantStore(fakeKV());
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "authorization_code",
       refreshToken: "ghr_x.y",
@@ -321,6 +325,7 @@ describe("refreshRepoGrant — request validation", () => {
   test("mismatched client_id → 400 invalid_client", async () => {
     const store = getRepoGrantStore(fakeKV());
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: "ghr_x.y",
@@ -339,6 +344,7 @@ describe("refreshRepoGrant — grant validity (permanent failures)", () => {
   test("unparseable refresh_token → 400 invalid_grant", async () => {
     const store = getRepoGrantStore(fakeKV());
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: "not-a-token",
@@ -352,6 +358,7 @@ describe("refreshRepoGrant — grant validity (permanent failures)", () => {
     const store = getRepoGrantStore(fakeKV());
     const creds = generateGrantCredentials();
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -365,6 +372,7 @@ describe("refreshRepoGrant — grant validity (permanent failures)", () => {
     const store = getRepoGrantStore(fakeKV());
     const { meta } = await seedGrant(store);
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: `ghr_${meta.grantId}.WRONGSECRET`,
@@ -380,6 +388,7 @@ describe("refreshRepoGrant — grant validity (permanent failures)", () => {
       revokedAt: "2026-06-11T00:00:00.000Z",
     });
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -491,6 +500,7 @@ describe("refreshRepoGrant — minting", () => {
     });
 
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -550,6 +560,7 @@ describe("refreshRepoGrant — minting", () => {
     });
 
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -591,6 +602,7 @@ describe("refreshRepoGrant — minting", () => {
     });
 
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -624,6 +636,7 @@ describe("refreshRepoGrant — minting", () => {
     });
 
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -650,6 +663,7 @@ describe("refreshRepoGrant — minting", () => {
       ),
     );
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -670,6 +684,7 @@ describe("refreshRepoGrant — minting", () => {
       ),
     );
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -688,6 +703,7 @@ describe("refreshRepoGrant — minting", () => {
     const { creds, meta } = await seedGrant(store);
     setFetch(async () => json({ message: "repo gone" }, 422));
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -705,6 +721,7 @@ describe("refreshRepoGrant — minting", () => {
     const { creds, meta } = await seedGrant(store);
     setFetch(async () => json({ message: "not found" }, 404));
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -722,6 +739,7 @@ describe("refreshRepoGrant — minting", () => {
     const { creds, meta } = await seedGrant(store);
     setFetch(async () => json({ message: "down" }, 503));
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,
@@ -743,6 +761,7 @@ describe("refreshRepoGrant — minting", () => {
     const { creds, meta } = await seedGrant(store);
     setFetch(async () => json({ message: "bad jwt" }, 401));
     const r = await refreshRepoGrant({
+      now: TEST_NOW,
       store,
       grantType: "refresh_token",
       refreshToken: creds.refreshToken,