From fe5f27c8e1ac9aa11d47f9d1f2e83ebeb35d396d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 14:08:30 -0300
Subject: [PATCH] test(auth): build the password-policy service with the reset
 queue, throttle and keyed hash

---
 Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
index 8183cf3..6e3a85e 100644
--- a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
+++ b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
@@ -133,7 +133,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             Mock.Of<IForgetPasswordDataService>(),
-            Mock.Of<IEmailSender>(),
+            Mock.Of<IPasswordResetEmailQueue>(),
+            new InMemoryPasswordResetThrottle(TimeProvider.System),
             TimeProvider.System);
 
         var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "Next2@x", CancellationToken.None);
@@ -179,7 +180,7 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
                 Email = user.Email!,
                 UserId = user.Id,
                 CodeSalt = salt,
-                CodeHash = PasswordResetCodeSecrets.Hash(salt, "123456"),
+                CodeHash = PasswordResetCodeSecrets.Hash(PasswordResetCodeSecrets.DeriveKey(new string('x', 64)), salt, "123456"),
                 ExpiresAtUtc = DateTime.UtcNow.AddMinutes(10)
             });
         forget.Setup(f => f.TryConsumeAttemptAsync(7, It.IsAny<int>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
@@ -220,7 +221,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             (forget ?? new Mock<IForgetPasswordDataService>()).Object,
-            Mock.Of<IEmailSender>(),
+            Mock.Of<IPasswordResetEmailQueue>(),
+            new InMemoryPasswordResetThrottle(TimeProvider.System),
             TimeProvider.System);
 
     public async ValueTask DisposeAsync()