git.squeep.com Git - akkoma/blob - test/pleroma/web/plugs/o_auth_plug_test.exs

   1 # Pleroma: A lightweight social networking server
   2 # Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
   3 # SPDX-License-Identifier: AGPL-3.0-only
   4
   5 defmodule Pleroma.Web.Plugs.OAuthPlugTest do
   6   use Pleroma.Web.ConnCase, async: true
   7
   8   alias Pleroma.Web.OAuth.Token
   9   alias Pleroma.Web.Plugs.OAuthPlug
  10
  11   import Pleroma.Factory
  12
  13   setup %{conn: conn} do
  14     user = insert(:user)
  15     {:ok, oauth_token} = Token.create(insert(:oauth_app), user)
  16     %{user: user, token: oauth_token, conn: conn}
  17   end
  18
  19   test "it does nothing if a user is assigned", %{conn: conn} do
  20     conn = assign(conn, :user, %Pleroma.User{})
  21     ret_conn = OAuthPlug.call(conn, %{})
  22
  23     assert ret_conn == conn
  24   end
  25
  26   test "with valid token (uppercase) in auth header, it assigns the user", %{conn: conn} = opts do
  27     conn =
  28       conn
  29       |> put_req_header("authorization", "BEARER #{opts[:token].token}")
  30       |> OAuthPlug.call(%{})
  31
  32     assert conn.assigns[:user] == opts[:user]
  33   end
  34
  35   test "with valid token (downcase) in auth header, it assigns the user", %{conn: conn} = opts do
  36     conn =
  37       conn
  38       |> put_req_header("authorization", "bearer #{opts[:token].token}")
  39       |> OAuthPlug.call(%{})
  40
  41     assert conn.assigns[:user] == opts[:user]
  42   end
  43
  44   test "with valid token (downcase) in url parameters, it assigns the user", opts do
  45     conn =
  46       :get
  47       |> build_conn("/?access_token=#{opts[:token].token}")
  48       |> put_req_header("content-type", "application/json")
  49       |> fetch_query_params()
  50       |> OAuthPlug.call(%{})
  51
  52     assert conn.assigns[:user] == opts[:user]
  53   end
  54
  55   test "with valid token (downcase) in body parameters, it assigns the user", opts do
  56     conn =
  57       :post
  58       |> build_conn("/api/v1/statuses", access_token: opts[:token].token, status: "test")
  59       |> OAuthPlug.call(%{})
  60
  61     assert conn.assigns[:user] == opts[:user]
  62   end
  63
  64   test "with invalid token, it does not assign the user", %{conn: conn} do
  65     conn =
  66       conn
  67       |> put_req_header("authorization", "bearer TTTTT")
  68       |> OAuthPlug.call(%{})
  69
  70     refute conn.assigns[:user]
  71   end
  72 end