sa.ts

packages/gmail-client/test/sa.ts

1. import { generateKeyPairSync } from 'node:crypto'
3. /**
4. * A REAL key, generated per run. The JWT path is the part of this client that
5. * cannot be eyeballed: a wrong base64 alphabet or a mis-serialized claim set
6. * produces a token Google rejects with a message that names none of it. Signing
7. * for real here means those break in CI rather than at 6am against Gmail.
8. */
9. export const SA = {
10. email: 'meridian-dashboard@meridian-ops.iam.gserviceaccount.com',
11. privateKey: generateKeyPairSync('rsa', {
12. modulusLength: 2048,
13. privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
14. publicKeyEncoding: { type: 'spki', format: 'pem' },
15. }).privateKey,
16. }