import apiTokenMiddleware from './api-token-middleware'; import getLogger from '../../test/fixtures/no-logger'; import { CLIENT } from '../types/permissions'; import { createTestConfig } from '../../test/config/test-config'; import ApiUser from '../types/api-user'; let config: any; beforeEach(() => { config = { getLogger, authentication: { enableApiToken: true, }, }; }); test('should not do anything if request does not contain a authorization', async () => { const apiTokenService = { getUserForToken: jest.fn(), }; const func = apiTokenMiddleware(config, { apiTokenService }); const cb = jest.fn(); const req = { header: jest.fn(), }; await func(req, undefined, cb); expect(req.header).toHaveBeenCalledTimes(1); expect(cb).toHaveBeenCalledTimes(1); }); test('should not add user if unknown token', async () => { const apiTokenService = { getUserForToken: jest.fn(), }; const func = apiTokenMiddleware(config, { apiTokenService }); const cb = jest.fn(); const req = { header: jest.fn().mockReturnValue('some-token'), user: undefined, }; await func(req, undefined, cb); expect(cb).toHaveBeenCalled(); expect(req.header).toHaveBeenCalled(); expect(req.user).toBeFalsy(); }); test('should add user if unknown token', async () => { const apiUser = new ApiUser({ username: 'default', permissions: [CLIENT], }); const apiTokenService = { getUserForToken: jest.fn().mockReturnValue(apiUser), }; const func = apiTokenMiddleware(config, { apiTokenService }); const cb = jest.fn(); const req = { header: jest.fn().mockReturnValue('some-known-token'), user: undefined, }; await func(req, undefined, cb); expect(cb).toHaveBeenCalled(); expect(req.header).toHaveBeenCalled(); expect(req.user).toBe(apiUser); }); test('should not add user if disabled', async () => { const apiUser = new ApiUser({ username: 'default', permissions: [CLIENT], }); const apiTokenService = { getUserForToken: jest.fn().mockReturnValue(apiUser), }; const disabledConfig = createTestConfig({ getLogger, authentication: { enableApiToken: false, createAdminUser: false, }, }); const func = apiTokenMiddleware(disabledConfig, { apiTokenService }); const cb = jest.fn(); const req = { header: jest.fn().mockReturnValue('some-known-token'), user: undefined, }; await func(req, undefined, cb); expect(cb).toHaveBeenCalled(); expect(req.user).toBeFalsy(); }); test('should call next if apiTokenService throws', async () => { getLogger.setMuteError(true); const apiTokenService = { getUserForToken: () => { throw new Error('hi there, i am stupid'); }, }; const func = apiTokenMiddleware(config, { apiTokenService }); const cb = jest.fn(); const req = { header: jest.fn().mockReturnValue('some-token'), user: undefined, }; await func(req, undefined, cb); expect(cb).toHaveBeenCalled(); getLogger.setMuteError(false); }); test('should call next if apiTokenService throws x2', async () => { const apiTokenService = { getUserForToken: () => { throw new Error('hi there, i am stupid'); }, }; const func = apiTokenMiddleware(config, { apiTokenService }); const cb = jest.fn(); const req = { header: jest.fn().mockReturnValue('some-token'), user: undefined, }; await func(req, undefined, cb); expect(cb).toHaveBeenCalled(); });