130 lines
3.8 KiB
Go
130 lines
3.8 KiB
Go
package auth_test
|
|
|
|
import (
|
|
"database/sql"
|
|
"net/http"
|
|
"testing"
|
|
|
|
"allaboutapps.dev/aw/go-starter/internal/api"
|
|
"allaboutapps.dev/aw/go-starter/internal/api/httperrors"
|
|
"allaboutapps.dev/aw/go-starter/internal/api/middleware"
|
|
"allaboutapps.dev/aw/go-starter/internal/test"
|
|
"allaboutapps.dev/aw/go-starter/internal/test/fixtures"
|
|
"github.com/labstack/echo/v4"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestPostLogoutSuccess(t *testing.T) {
|
|
test.WithTestServer(t, func(s *api.Server) {
|
|
ctx := t.Context()
|
|
fix := fixtures.Fixtures()
|
|
|
|
res := test.PerformRequest(t, s, "POST", "/api/v1/auth/logout", nil, test.HeadersWithAuth(t, fix.User1AccessToken1.Token))
|
|
assert.Equal(t, http.StatusNoContent, res.Result().StatusCode)
|
|
|
|
err := fix.User1AccessToken1.Reload(ctx, s.DB)
|
|
require.ErrorIs(t, err, sql.ErrNoRows)
|
|
|
|
err = fix.User1RefreshToken1.Reload(ctx, s.DB)
|
|
require.NoError(t, err)
|
|
})
|
|
}
|
|
|
|
func TestPostLogoutSuccessWithRefreshToken(t *testing.T) {
|
|
test.WithTestServer(t, func(s *api.Server) {
|
|
ctx := t.Context()
|
|
fix := fixtures.Fixtures()
|
|
|
|
payload := test.GenericPayload{
|
|
"refresh_token": fix.User1RefreshToken1.Token,
|
|
}
|
|
|
|
res := test.PerformRequest(t, s, "POST", "/api/v1/auth/logout", payload, test.HeadersWithAuth(t, fix.User1AccessToken1.Token))
|
|
assert.Equal(t, http.StatusNoContent, res.Result().StatusCode)
|
|
|
|
err := fix.User1AccessToken1.Reload(ctx, s.DB)
|
|
require.ErrorIs(t, err, sql.ErrNoRows)
|
|
|
|
err = fix.User1RefreshToken1.Reload(ctx, s.DB)
|
|
require.ErrorIs(t, err, sql.ErrNoRows)
|
|
})
|
|
}
|
|
|
|
func TestPostLogoutSuccessWithUnknownRefreshToken(t *testing.T) {
|
|
test.WithTestServer(t, func(s *api.Server) {
|
|
ctx := t.Context()
|
|
fix := fixtures.Fixtures()
|
|
|
|
payload := test.GenericPayload{
|
|
"refresh_token": "93d8ccd0-be30-4661-a428-cbe74e1a3ffe",
|
|
}
|
|
|
|
res := test.PerformRequest(t, s, "POST", "/api/v1/auth/logout", payload, test.HeadersWithAuth(t, fix.User1AccessToken1.Token))
|
|
assert.Equal(t, http.StatusNoContent, res.Result().StatusCode)
|
|
|
|
err := fix.User1AccessToken1.Reload(ctx, s.DB)
|
|
require.ErrorIs(t, err, sql.ErrNoRows)
|
|
|
|
err = fix.User1RefreshToken1.Reload(ctx, s.DB)
|
|
require.NoError(t, err)
|
|
})
|
|
}
|
|
|
|
func TestPostLogoutInvalidRefreshToken(t *testing.T) {
|
|
test.WithTestServer(t, func(s *api.Server) {
|
|
ctx := t.Context()
|
|
fix := fixtures.Fixtures()
|
|
payload := test.GenericPayload{
|
|
"refresh_token": "not my refresh token",
|
|
}
|
|
|
|
res := test.PerformRequest(t, s, "POST", "/api/v1/auth/logout", payload, test.HeadersWithAuth(t, fix.User1AccessToken1.Token))
|
|
assert.Equal(t, http.StatusBadRequest, res.Result().StatusCode)
|
|
|
|
var response httperrors.HTTPValidationError
|
|
test.ParseResponseAndValidate(t, res, &response)
|
|
|
|
test.Snapshoter.Save(t, response)
|
|
|
|
err := fix.User1AccessToken1.Reload(ctx, s.DB)
|
|
require.NoError(t, err)
|
|
|
|
err = fix.User1RefreshToken1.Reload(ctx, s.DB)
|
|
require.NoError(t, err)
|
|
})
|
|
}
|
|
|
|
func TestPostLogoutError(t *testing.T) {
|
|
test.WithTestServer(t, func(s *api.Server) {
|
|
tests := []struct {
|
|
name string
|
|
expectedError *httperrors.HTTPError
|
|
headers http.Header
|
|
}{
|
|
{
|
|
name: "InvalidAuthToken",
|
|
expectedError: middleware.ErrBadRequestMalformedToken,
|
|
headers: test.HeadersWithAuth(t, "not my auth token"),
|
|
},
|
|
{
|
|
name: "UnknownAuthToken",
|
|
expectedError: httperrors.NewFromEcho(echo.ErrUnauthorized),
|
|
headers: test.HeadersWithAuth(t, "25e8630e-9a41-4f38-8339-373f0c203cef"),
|
|
},
|
|
{
|
|
name: "MissingAuthToken",
|
|
expectedError: httperrors.NewFromEcho(echo.ErrUnauthorized),
|
|
headers: nil,
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
res := test.PerformRequest(t, s, "POST", "/api/v1/auth/logout", nil, tt.headers)
|
|
test.RequireHTTPError(t, res, tt.expectedError)
|
|
})
|
|
}
|
|
})
|
|
}
|