collection_test.go

package introspector_test

import (
	"fmt"
	"testing"

	"github.com/codeclysm/introspector"
	"github.com/dgrijalva/jwt-go"
	"github.com/pborman/uuid"

	"time"
)

var token1 string = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJleGFtcGxlIiwiZXhwIjoxNDg2Mzk0Nzc5LCJqdGkiOiJmODVjNTM0Yy03M2JhLTQ3NjMtYTU4MS0yMzkxN2I5Nzc5MjUiLCJpYXQiOjE0ODYzODg3NzksImlzcyI6ImFwaS5leGFtcGxlLmNjIiwibmJmIjoxNDg2Mzg4Nzc5LCJzdWIiOiJ0ZXN0IiwidXNlciI6eyJlbWFpbCI6InRlc3RAZXhhbXBsZS5jb20iLCJpZCI6InRlc3QiLCJ1aWQiOiJ0ZXN0In19.mpRwH7Klc2P1X93N1f0Qf_W3RcNfxm97xwSLEpgSlIw"

var token2 string = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJleGFtcGxlIiwiZXhwIjoxNDg2Mzk0Nzc5LCJqdGkiOiJmODVjNTM0Yy03M2JhLTQ3NjMtYTU4MS0yMzkxN2I5Nzc5MjUiLCJpYXQiOjE0ODYzODg3NzksImlzcyI6ImFwaS5leGFtcGxlLmNjIiwibmJmIjoxNDg2Mzg4Nzc5LCJzdWIiOiJ0ZXN0IiwidXNlciI6eyJlbWFpbCI6InRlc3RAZXhhbXBsZS5jb20iLCJpZCI6InRlc3QiLCJ1aWQiOiJ0ZXN0In19.8vc9IRexqGZ4UtyQatgsCpe020Rq7Jpz4FJNjIK114Y"

func TestCollectionIntrospect(t *testing.T) {
	cases := []struct {
		Token            string
		ExpIntrospection introspector.Introspection
	}{
		{
			token1,
			introspector.Introspection{
				Active: false, Subject: "test", ExpiresAt: 1486394779, IssuedAt: 1486388779, NotBefore: 1486388779, Issuer: "api.example.cc", Audience: "example",
				Extra: map[string]interface{}{
					"user": map[string]interface{}{
						"email": "test@example.com",
						"id":    "test",
						"uid":   "test",
					},
					"jti": "f85c534c-73ba-4763-a581-23917b977925",
				},
			},
		}, {
			token2,
			introspector.Introspection{
				Active: false, Subject: "test", ExpiresAt: 1486394779, IssuedAt: 1486388779, NotBefore: 1486388779, Issuer: "api.example.cc", Audience: "example",
				Extra: map[string]interface{}{
					"user": map[string]interface{}{
						"email": "test@example.com",
						"id":    "test",
						"uid":   "test",
					},
					"jti": "f85c534c-73ba-4763-a581-23917b977925",
				},
			},
		},
	}
	for _, tc := range cases {
		jwt1 := introspector.JWT{
			Key: []byte("secret"),
		}
		jwt2 := introspector.JWT{
			Key: []byte("terces"),
		}

		coll := introspector.Collection{jwt1, jwt2}

		t.Run(fmt.Sprintf("%s", tc.Token), func(t *testing.T) {
			i, err := coll.Introspect(tc.Token)
			if err != nil {
				t.Fatalf("err: %s", err.Error())
			}
			equal(t, i, &tc.ExpIntrospection)
		})
	}
}
func TestCollectionAllowed(t *testing.T) {
	jwt1 := introspector.JWT{
		Key: []byte("secret"),
	}
	jwt2 := introspector.JWT{
		Key: []byte("terces"),
	}

	perm := introspector.Permission{
		Action:   "do",
		Resource: "thing",
	}

	coll := introspector.Collection{jwt1, jwt2}
	valid := true
	var token string
	var i *introspector.Introspection
	var err error
	var can bool

	// Valid token for jwt1
	token = createJwt([]byte("secret"), valid)
	i, can, err = coll.Allowed(token, perm)
	if i == nil {
		t.Errorf("valid token for jwt1: introspection should not be nil")
	}
	if !can {
		t.Errorf("valid token for jwt1: can should not be false")
	}

	if err != nil {
		t.Errorf("valid token for jwt1: err should not be '%v'", err)
	}

	// Valid token for jwt2
	token = createJwt([]byte("terces"), valid)
	i, can, err = coll.Allowed(token, perm)
	if i == nil {
		t.Errorf("valid token for jwt2: introspection should not be nil")
	}
	if !can {
		t.Errorf("valid token for jwt2: can should not be false")
	}

	if err != nil {
		t.Errorf("valid token for jwt2: err should not be '%v'", err)
	}

	// Expired token for jwt1
	token = createJwt([]byte("secret"), !valid)
	i, can, err = coll.Allowed(token, perm)
	if i != nil {
		t.Errorf("invalid token for jwt1: introspection should be nil")
	}
	if can {
		t.Errorf("invalid token for jwt1: can should not be true")
	}

	if err == nil {
		t.Errorf("valid token for jwt1: err should not be nil")
	}
	// Expired token for jwt2
	token = createJwt([]byte("terces"), !valid)
	i, can, err = coll.Allowed(token, perm)
	if i != nil {
		t.Errorf("invalid token for jwt2: introspection should be nil")
	}
	if can {
		t.Errorf("invalid token for jwt2: can should not be true")
	}

	if err == nil {
		t.Errorf("valid token for jwt2: err should not be nil")
	}
}

func createJwt(key []byte, valid bool) string {
	timestamp := time.Now()
	if !valid {
		timestamp = timestamp.Add(-time.Hour * 24)
	}

	claims := &jwt.StandardClaims{
		Audience:  "test",
		ExpiresAt: timestamp.Add(time.Hour * 1).Unix(),
		Id:        uuid.New(),
		IssuedAt:  timestamp.Unix(),
		Issuer:    "api.arduino.cc",
		NotBefore: timestamp.Unix(),
		Subject:   "userid",
	}

	token := jwt.NewWithClaims(jwt.GetSigningMethod("HS256"), claims)

	tokenString, _ := token.SignedString([]byte(key))
	return tokenString
}