git.squeep.com Git - akkoma/blob - test/plugs/admin_secret_authentication_plug_test.exs

   1 # Pleroma: A lightweight social networking server
   2 # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
   3 # SPDX-License-Identifier: AGPL-3.0-only
   4
   5 defmodule Pleroma.Plugs.AdminSecretAuthenticationPlugTest do
   6   use Pleroma.Web.ConnCase, async: true
   7   import Pleroma.Factory
   8
   9   alias Pleroma.Plugs.AdminSecretAuthenticationPlug
  10
  11   test "does nothing if a user is assigned", %{conn: conn} do
  12     user = insert(:user)
  13
  14     conn =
  15       conn
  16       |> assign(:user, user)
  17
  18     ret_conn =
  19       conn
  20       |> AdminSecretAuthenticationPlug.call(%{})
  21
  22     assert conn == ret_conn
  23   end
  24
  25   describe "when secret set it assigns an admin user" do
  26     setup do: clear_config([:admin_token])
  27
  28     test "with `admin_token` query parameter", %{conn: conn} do
  29       Pleroma.Config.put(:admin_token, "password123")
  30
  31       conn =
  32         %{conn | params: %{"admin_token" => "wrong_password"}}
  33         |> AdminSecretAuthenticationPlug.call(%{})
  34
  35       refute conn.assigns[:user]
  36
  37       conn =
  38         %{conn | params: %{"admin_token" => "password123"}}
  39         |> AdminSecretAuthenticationPlug.call(%{})
  40
  41       assert conn.assigns[:user].is_admin
  42     end
  43
  44     test "with `x-admin-token` HTTP header", %{conn: conn} do
  45       Pleroma.Config.put(:admin_token, "☕️")
  46
  47       conn =
  48         conn
  49         |> put_req_header("x-admin-token", "🥛")
  50         |> AdminSecretAuthenticationPlug.call(%{})
  51
  52       refute conn.assigns[:user]
  53
  54       conn =
  55         conn
  56         |> put_req_header("x-admin-token", "☕️")
  57         |> AdminSecretAuthenticationPlug.call(%{})
  58
  59       assert conn.assigns[:user].is_admin
  60     end
  61   end
  62 end