test_token.sh

#!/bin/bash
# The only real logic in this repo is REPO_URL -> GitHub API path; everything
# else is curl calls and env plumbing. DRY_RUN=1 makes that parsing assertable
# without a PAT or network. Run: ./test_token.sh
set -euo pipefail
cd "$(dirname "$0")"

API=https://api.github.com/repos
WANT="${API}/acme/utilityvault/actions/runners/registration-token"
failed=0

ok() {
  local url="$1" got
  got=$(DRY_RUN=1 ACCESS_TOKEN=x REPO_URL="$url" ./token.sh)
  if [[ "$got" == "$WANT" ]]; then
    echo "ok    $url"
  else
    echo "FAIL  $url"
    echo "        got  $got"
    echo "        want $WANT"
    failed=1
  fi
}

rejects() {
  local url="$1"
  if DRY_RUN=1 ACCESS_TOKEN=x REPO_URL="$url" ./token.sh >/dev/null 2>&1; then
    echo "FAIL  should have been rejected: $url"
    failed=1
  else
    echo "ok    rejected $url"
  fi
}

ok "https://github.com/acme/utilityvault"
ok "https://github.com/acme/utilityvault/"
ok "https://github.com/acme/utilityvault.git"

# An ssh remote would otherwise parse into a nonsense API path.
rejects "git@github.com:acme/utilityvault.git"
# Org URL: right shape for an org-scoped runner, wrong endpoint for a repo one.
rejects "https://github.com/acme"

(( failed == 0 )) && echo "all passed"
exit "$failed"