akkoma/test/pleroma/web/plugs/o_auth_plug_test.exs

73 lines
2.1 KiB
Elixir
Raw Normal View History

2018-12-23 20:11:29 +00:00
# Pleroma: A lightweight social networking server
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
2018-12-23 20:11:29 +00:00
# SPDX-License-Identifier: AGPL-3.0-only
2020-06-23 15:16:47 +00:00
defmodule Pleroma.Web.Plugs.OAuthPlugTest do
2018-12-05 14:29:49 +00:00
use Pleroma.Web.ConnCase, async: true
alias Pleroma.Web.OAuth.Token
2020-06-24 06:59:21 +00:00
alias Pleroma.Web.Plugs.OAuthPlug
2018-12-05 14:29:49 +00:00
import Pleroma.Factory
2018-12-05 14:29:49 +00:00
setup %{conn: conn} do
user = insert(:user)
{:ok, oauth_token} = Token.create(insert(:oauth_app), user)
%{user: user, token: oauth_token, conn: conn}
end
test "it does nothing if a user is assigned", %{conn: conn} do
conn = assign(conn, :user, %Pleroma.User{})
ret_conn = OAuthPlug.call(conn, %{})
assert ret_conn == conn
2018-12-05 14:29:49 +00:00
end
test "with valid token (uppercase) in auth header, it assigns the user", %{conn: conn} = opts do
2018-12-05 14:29:49 +00:00
conn =
conn
|> put_req_header("authorization", "BEARER #{opts[:token].token}")
2018-12-05 14:29:49 +00:00
|> OAuthPlug.call(%{})
assert conn.assigns[:user] == opts[:user]
end
test "with valid token (downcase) in auth header, it assigns the user", %{conn: conn} = opts do
2018-12-05 14:29:49 +00:00
conn =
conn
|> put_req_header("authorization", "bearer #{opts[:token].token}")
2018-12-05 14:29:49 +00:00
|> OAuthPlug.call(%{})
assert conn.assigns[:user] == opts[:user]
end
test "with valid token (downcase) in url parameters, it assigns the user", opts do
conn =
:get
|> build_conn("/?access_token=#{opts[:token].token}")
|> put_req_header("content-type", "application/json")
|> fetch_query_params()
|> OAuthPlug.call(%{})
assert conn.assigns[:user] == opts[:user]
end
test "with valid token (downcase) in body parameters, it assigns the user", opts do
conn =
:post
|> build_conn("/api/v1/statuses", access_token: opts[:token].token, status: "test")
|> OAuthPlug.call(%{})
assert conn.assigns[:user] == opts[:user]
end
test "with invalid token, it does not assign the user", %{conn: conn} do
2018-12-05 14:29:49 +00:00
conn =
conn
|> put_req_header("authorization", "bearer TTTTT")
|> OAuthPlug.call(%{})
refute conn.assigns[:user]
end
end