package com.example.web;
import org.junit.jupiter.api.Test;
import static org.junit.jupiter.api.Assertions.*;
class CsrfTest {
    @Test void comparisonRejectsMissingAndDifferentTokens() {
        assertTrue(Csrf.valid("secret","secret"));
        assertFalse(Csrf.valid("secret","other"));
        assertFalse(Csrf.valid("secret",null));
        assertFalse(Csrf.valid(null,"secret"));
    }
}