Luciano Milani
52 lines
1.5 KiB
Go
52 lines
1.5 KiB
Go
package auth_test
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/techxcar/backend/internal/auth"
|
|
)
|
|
|
|
const testSecret = "test-secret-32-chars-minimum-ok!"
|
|
|
|
func TestGenerateAndValidateAccessToken(t *testing.T) {
|
|
token, err := auth.GenerateAccessToken("user-1", "tenant-1", "tenant_admin", testSecret)
|
|
require.NoError(t, err)
|
|
assert.NotEmpty(t, token)
|
|
|
|
claims, err := auth.ValidateToken(token, testSecret)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "user-1", claims.UserID)
|
|
assert.Equal(t, "tenant-1", claims.TenantID)
|
|
assert.Equal(t, "tenant_admin", claims.Role)
|
|
assert.True(t, claims.ExpiresAt.After(time.Now()))
|
|
assert.True(t, claims.ExpiresAt.Before(time.Now().Add(16*time.Minute)))
|
|
}
|
|
|
|
func TestGenerateRefreshToken_longerExpiry(t *testing.T) {
|
|
token, err := auth.GenerateRefreshToken("user-1", "", "super_admin", testSecret)
|
|
require.NoError(t, err)
|
|
|
|
claims, err := auth.ValidateToken(token, testSecret)
|
|
require.NoError(t, err)
|
|
assert.Empty(t, claims.TenantID)
|
|
assert.Equal(t, "super_admin", claims.Role)
|
|
assert.True(t, claims.ExpiresAt.After(time.Now().Add(29*24*time.Hour)))
|
|
}
|
|
|
|
func TestValidateToken_wrongSecret(t *testing.T) {
|
|
token, err := auth.GenerateAccessToken("user-1", "t-1", "manager", testSecret)
|
|
require.NoError(t, err)
|
|
|
|
_, err = auth.ValidateToken(token, "different-secret-32chars-minimumx")
|
|
assert.Error(t, err)
|
|
}
|
|
|
|
func TestValidateToken_malformed(t *testing.T) {
|
|
_, err := auth.ValidateToken("not.a.jwt", testSecret)
|
|
assert.Error(t, err)
|
|
}
|