Skip to content

Commit

Permalink
Splitting up tests
Browse files Browse the repository at this point in the history
  • Loading branch information
@avoidwork
avoidwork committed Apr 3, 2015
1 parent bd383c4 commit e897a15
Show file tree
Hide file tree
Showing 6 changed files with 472 additions and 462 deletions.
30 changes: 0 additions & 30 deletions .jshintrc
View file

This file was deleted.

1 change: 0 additions & 1 deletion .npmignore
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,6 @@
/sass/
.git
.gitignore
.jshintrc
.travis.yml
docstrap.json
Gruntfile.js
Expand Down
1 change: 1 addition & 0 deletions .travis.yml
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
language: node_js
node_js:
- "0.10"
- "0.12"
- "iojs"
331 changes: 331 additions & 0 deletions test/auth_test.js
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,331 @@
var hippie = require( "hippie" ),
tenso = require( "../lib/tenso" ),
routes = require( "./routes.js" ),
array = require( "keigai" ).util.array,
csrf = 'x-csrf-token';

function persistCookies ( opts, next ) {
opts.jar = true;
next( opts );
}

function api ( port, not_json ) {
var obj = hippie().base( "http://localhost:" + port ).use( persistCookies );

return not_json ? obj : obj.expectHeader( "Content-Type", "application/json" ).json();
}

function get_token ( port, fn, url ) {
return api( port ).get( url || "/login" ).end( fn );
}

process.setMaxListeners(0);

describe( "Permissions (CSRF disabled)", function () {
var port = 8001;

tenso( { port: port, routes: routes, logs: { level: "error" }, security: { csrf: false } } );

it( "GET / - returns an array of endpoints", function ( done ) {
api( port )
.get( "/" )
.expectStatus( 200 )
.expectHeader( "allow", "GET, HEAD, OPTIONS" )
.expectValue( "data.link", [ {
uri: "http://localhost:" + port + "/items",
rel: "item"
}, { uri: "http://localhost:" + port + "/things", rel: "item" } ] )
.expectValue( "data.result", [ "/items", "/things" ] )
.expectValue( "error", null )
.expectValue( "status", 200 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "GET /invalid - returns a 'not found' error", function ( done ) {
api( port )
.get( "/invalid" )
.expectStatus( 404 )
.expectValue( "data", null )
.expectValue( "error", "Not Found" )
.expectValue( "status", 404 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "DELETE / - returns a 'method not allowed' error", function ( done ) {
api( port )
.del( "/" )
.expectStatus( 405 )
.expectValue( "data", null )
.expectValue( "error", "Method Not Allowed" )
.expectValue( "status", 405 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "POST / - returns a 'method not allowed' error", function ( done ) {
api( port )
.post( "/" )
.expectStatus( 405 )
.expectValue( "data", null )
.expectValue( "error", "Method Not Allowed" )
.expectValue( "status", 405 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "PUT / - returns a 'method not allowed' error", function ( done ) {
api( port )
.put( "/" )
.expectStatus( 405 )
.expectValue( "data", null )
.expectValue( "error", "Method Not Allowed" )
.expectValue( "status", 405 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "PATCH / - returns a 'method not allowed' error", function ( done ) {
api( port )
.patch( "/" )
.expectStatus( 405 )
.expectValue( "data", null )
.expectValue( "error", "Method Not Allowed" )
.expectValue( "status", 405 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );
} );

describe( "Basic Auth", function () {
var port = 8004;

tenso( {
port: port,
routes: routes,
logs: { level: "error" },
auth: { basic: { enabled: true, list: [ "test:123" ] }, protect: [ "/uuid" ] }
} );

it( "GET / - returns links", function ( done ) {
api( port )
.get( "/" )
.expectStatus( 200 )
.expectValue( "data.link", [ {
uri: "http://localhost:" + port + "/items",
rel: "item"
}, { uri: "http://localhost:" + port + "/things", rel: "item" } ] )
.expectValue( "data.result", [ "/items", "/things" ] )
.expectValue( "error", null )
.expectValue( "status", 200 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "GET /uuid - returns a uuid (authorized)", function ( done ) {
api( port )
.auth( 'test', '123' )
.get( "/uuid" )
.expectStatus( 200 )
.expectValue( "data.link", [ { uri: "http://localhost:" + port, rel: "collection" } ] )
.expectValue( "error", null )
.expectValue( "status", 200 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "GET /uuid - returns an 'unauthorized' error", function ( done ) {
api( port, true )
.get( "/uuid" )
.expectStatus( 401 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );
} );

describe( "OAuth2 Token Bearer", function () {
var port = 8005;

tenso( {
port: port,
routes: routes,
logs: { level: "error" },
auth: { bearer: { enabled: true, tokens: [ "abc-123" ] }, protect: [ "/" ] }
} );

it( "GET / - returns an array of endpoints (authorized)", function ( done ) {
api( port )
.header( 'Authorization', 'Bearer abc-123' )
.get( "/" )
.expectStatus( 200 )
.expectValue( "data.link", [ {
uri: "http://localhost:" + port + "/items",
rel: "item"
}, { uri: "http://localhost:" + port + "/things", rel: "item" } ] )
.expectValue( "data.result", [ "/items", "/things" ] )
.expectValue( "error", null )
.expectValue( "status", 200 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "GET / - returns an 'unauthorized' error", function ( done ) {
api( port, true )
.get( "/" )
.expectStatus( 401 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );
} );

describe( "Local", function () {
var port = 8006;

tenso( {
port: port,
routes: require( "./routes.js" ),
logs: {
level: "error",
dtrace: true,
stderr: true
},
auth: {
local: {
enabled: true,
auth: function ( username, password, callback ) {
if ( username === "test" && password === 123 ) {
callback( null, { username: username, password: password } );
}
else {
callback( true, null );
}
}
},
protect: [ "/uuid" ]
}
} );

it( "GET /uuid (invalid) - returns an 'unauthorized' error", function ( done ) {
api( port, true )
.get( "/uuid" )
.expectStatus( 302 )
.expectHeader( "Location", "/login" )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "GET /login - returns an authentication message", function ( done ) {
api( port )
.get( "/login" )
.expectStatus( 200 )
.expectValue( "data.link", [ { uri: "http://localhost:" + port, rel: "collection" } ] )
.expectValue( "data.result", { instruction: "POST 'username' & 'password' to authenticate" } )
.expectValue( "error", null )
.expectValue( "status", 200 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "POST /login (invalid / no CSRF token) - returns an 'unauthorized' error", function ( done ) {
api( port )
.post( "/login" )
.form()
.send( { username: "test", password: 1232 } )
.expectStatus( 403 )
.expectValue( "data", null )
.expectValue( "error", "CSRF token mismatch" )
.expectValue( "status", 403 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );

it( "POST /login (invalid) - returns an 'unauthorized' error", function ( done ) {
get_token( port, function ( err, res ) {
var token;

if ( err ) throw err;

token = res.headers[ csrf ];

api( port, true )
.header( csrf, token )
.post( "/login" )
.form()
.send( { username: "test", password: 1232 } )
.json()
.expectStatus( 401 )
.expectValue( "data", null )
.expectValue( "error", "Unauthorized" )
.expectValue( "status", 401 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );
} );

// needs to reuse the session cookie header for identification
it( "POST /login - redirects to a predetermined URI", function ( done ) {
get_token( port, function ( err, res ) {
var token;

if ( err ) throw err;

token = res.headers[ csrf ];

api( port, true )
.header( csrf, token )
.post( "/login" )
.form()
.send( { username: "test", password: 123 } )
.expectStatus( 302 )
.expectHeader( "Location", "/" )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );
} );

it( "GET /uuid (session) - returns a version 4 uuid", function ( done ) {
api( port )
.get( "/uuid" )
.expectStatus( 200 )
.expectValue( "data.link", [ { uri: "http://localhost:" + port, rel: "collection" } ] )
.expectValue( "error", null )
.expectValue( "status", 200 )
.end( function ( err ) {
if ( err ) throw err;
done();
} );
} );
} );
Loading

0 comments on commit e897a15

Please sign in to comment.