94 lines
2.2 KiB
Go
94 lines
2.2 KiB
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"sync/atomic"
|
|
"testing"
|
|
|
|
"projectreshoot/db"
|
|
"projectreshoot/tests"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestReauthRequired(t *testing.T) {
|
|
logger := tests.NilLogger()
|
|
// Basic setup
|
|
conn, err := tests.SetupTestDB()
|
|
require.NoError(t, err)
|
|
sconn := db.MakeSafe(conn, logger)
|
|
defer sconn.Close()
|
|
|
|
cfg, err := tests.TestConfig()
|
|
require.NoError(t, err)
|
|
|
|
// Handler to check outcome of Authentication middleware
|
|
testHandler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusOK)
|
|
})
|
|
|
|
var maint uint32
|
|
atomic.StoreUint32(&maint, 0)
|
|
// Add the middleware and create the server
|
|
reauthRequiredHandler := RequiresFresh(testHandler)
|
|
loginRequiredHandler := RequiresLogin(reauthRequiredHandler)
|
|
authHandler := Authentication(logger, cfg, sconn, loginRequiredHandler, &maint)
|
|
server := httptest.NewServer(authHandler)
|
|
defer server.Close()
|
|
|
|
tokens := getTokens()
|
|
|
|
tests := []struct {
|
|
name string
|
|
accessToken string
|
|
refreshToken string
|
|
expectedCode int
|
|
}{
|
|
{
|
|
name: "Fresh Login",
|
|
accessToken: tokens["accessFresh"],
|
|
refreshToken: "",
|
|
expectedCode: http.StatusOK,
|
|
},
|
|
{
|
|
name: "Unfresh Login",
|
|
accessToken: tokens["accessUnfresh"],
|
|
refreshToken: "",
|
|
expectedCode: 444,
|
|
},
|
|
{
|
|
name: "Expired login",
|
|
accessToken: tokens["accessExpired"],
|
|
refreshToken: tokens["refreshExpired"],
|
|
expectedCode: http.StatusUnauthorized,
|
|
},
|
|
{
|
|
name: "No login",
|
|
accessToken: "",
|
|
refreshToken: "",
|
|
expectedCode: http.StatusUnauthorized,
|
|
},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
client := &http.Client{}
|
|
|
|
req, _ := http.NewRequest(http.MethodGet, server.URL, nil)
|
|
|
|
// Add cookies if provided
|
|
if tt.accessToken != "" {
|
|
req.AddCookie(&http.Cookie{Name: "access", Value: tt.accessToken})
|
|
}
|
|
if tt.refreshToken != "" {
|
|
req.AddCookie(&http.Cookie{Name: "refresh", Value: tt.refreshToken})
|
|
}
|
|
|
|
resp, err := client.Do(req)
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, tt.expectedCode, resp.StatusCode)
|
|
})
|
|
}
|
|
}
|