unleash.unleash/src/lib/middleware/oss-authentication.test.js

'use strict';

const test = require('ava');
const supertest = require('supertest');
const { EventEmitter } = require('events');
const store = require('../../test/fixtures/store');
const ossAuth = require('./oss-authentication');
const getApp = require('../app');
const getLogger = require('../../test/fixtures/no-logger');
const { User } = require('../server-impl');

const eventBus = new EventEmitter();

function getSetup(preRouterHook) {
    const base = `/random${Math.round(Math.random() * 1000)}`;
    const stores = store.createStores();
    const app = getApp({
        baseUriPath: base,
        stores,
        eventBus,
        getLogger,
        preRouterHook(_app) {
            preRouterHook(_app);
            ossAuth(_app, { baseUriPath: base });

            _app.get(`${base}/api/protectedResource`, (req, res) => {
                res.status(200)
                    .json({ message: 'OK' })
                    .end();
            });
        },
    });

    return {
        base,
        request: supertest(app),
    };
}

test('should return 401 when missing user', t => {
    t.plan(0);
    const { base, request } = getSetup(() => {});

    return request.get(`${base}/api/protectedResource`).expect(401);
});

test('should return 200 when user exists', t => {
    t.plan(0);
    const user = new User({ id: 1, email: 'some@mail.com' });
    const { base, request } = getSetup(app =>
        app.use((req, res, next) => {
            req.user = user;
            next();
        }),
    );

    return request.get(`${base}/api/protectedResource`).expect(200);
});