yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-12-28 07:33:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

add tests for expiry

Browse Source
This commit is contained in:
Ben Irvin 2022-08-24 10:48:24 +02:00
parent 412f21e973
commit 73345efa54
1 changed files with 51 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
packages/core/admin/server/strategies/__tests__/api-token.test.js
View File

@ -116,32 +116,6 @@ describe('API Token Auth Strategy', () => {
expect(getBy).toHaveBeenCalledWith({ accessKey: 'api-token_tests-hashed-access-key' });
});
test('Expired token throws on verify', async () => {
const pastDate = Date.now() - 1;
const token = {
...apiToken,
expiresAt: pastDate,
lifespan: 1000,
};
const update = jest.fn(() => apiToken);
const ctx = createContext({}, { request });
global.strapi = {
admin: {
services: {
'api-token': {
hash,
update,
},
},
},
};
expect(async () => {
await apiTokenStrategy.verify({ ...ctx, credentials: token });
}).rejects.toThrow(new UnauthorizedError('Token expired'));
});
});
describe('Verify an access key', () => {
@ -219,6 +193,44 @@ describe('API Token Auth Strategy', () => {
).toBeUndefined();
});
test('Verify with expiration in future', () => {
global.strapi = {
container,
};
expect(
apiTokenStrategy.verify(
{
credentials: {
...readOnlyApiToken,
lifespan: 1000,
expiresAt: Date.now() + 99999,
},
},
{ scope: ['api::model.model.find'] }
)
).toBeUndefined();
});
test('Throws with expired token', () => {
global.strapi = {
container,
};
expect(async () => {
apiTokenStrategy.verify(
{
credentials: {
...readOnlyApiToken,
lifespan: 1000,
expiresAt: Date.now() - 1,
},
},
{ scope: ['api::model.model.find'] }
);
}).rejects.toThrow(new UnauthorizedError('Token expired'));
});
test('Throws an error if trying to access a `full-access` action with a read only access key', () => {
global.strapi = {
container,
@ -303,8 +315,18 @@ describe('API Token Auth Strategy', () => {
}
});
test.todo('works if token does not have an expiration');
test.todo('works if token has expiration but is not expired');
test.todo('Throws an error if token is expired');
test('Throws an error if token is expird', () => {
global.strapi = {
container,
};
expect.assertions(1);
try {
apiTokenStrategy.verify({ credentials: customApiToken }, {});
} catch (err) {
expect(err).toBeInstanceOf(Error);
}
});
});
});