package config

import (
	"strings"
	"testing"
)

func TestBootstrapPasswordRejectsSharedDefaultsAndBcryptOverflow(t *testing.T) {
	for _, value := range []string{"", "short", "superadmin123", "SUPERADMIN123", "password1234", "changeme-password", "{{ADMIN_PASSWORD}}", strings.Repeat("x", 73), strings.Repeat("界", 25)} {
		if err := ValidateBootstrapPassword(value); err == nil {
			t.Fatal("unsafe bootstrap password accepted")
		}
	}
	if err := ValidateBootstrapPassword("unique-test-password-82!safe"); err != nil {
		t.Fatal(err)
	}
}