49 lines
1.6 KiB
TypeScript
49 lines
1.6 KiB
TypeScript
import { test, expect } from "vitest";
|
|
import Fastify from "fastify";
|
|
import { authPreHandler, getPrincipal } from "../src/auth/auth.js";
|
|
|
|
test("local mode resolves a stable local principal", async () => {
|
|
const app = Fastify();
|
|
app.addHook("preHandler", authPreHandler("none"));
|
|
app.get("/me", async (req) => getPrincipal(req));
|
|
expect((await app.inject({ method: "GET", url: "/me" })).json()).toMatchObject({
|
|
issuer: "local",
|
|
subject: expect.any(String),
|
|
isAdmin: false,
|
|
});
|
|
});
|
|
|
|
test("mock mode makes a principal from the test header", async () => {
|
|
const app = Fastify();
|
|
app.addHook("preHandler", authPreHandler("mock"));
|
|
app.get("/me", async (req) => getPrincipal(req));
|
|
const res = await app.inject({
|
|
method: "GET",
|
|
url: "/me",
|
|
headers: { "x-mock-user": "alice" },
|
|
});
|
|
expect(res.json()).toEqual({ issuer: "mock", subject: "alice", displayName: "alice", isAdmin: false });
|
|
});
|
|
|
|
test("upstream mode accepts only normalized proxy principal headers", async () => {
|
|
const app = Fastify();
|
|
app.addHook("preHandler", authPreHandler("upstream"));
|
|
app.get("/me", async (req) => getPrincipal(req));
|
|
|
|
expect((await app.inject({ method: "GET", url: "/me" })).statusCode).toBe(401);
|
|
const authenticated = await app.inject({
|
|
method: "GET",
|
|
url: "/me",
|
|
headers: {
|
|
"x-thoth-principal-issuer": "portal",
|
|
"x-thoth-principal-subject": "42",
|
|
"x-thoth-principal-display-name": "Alice",
|
|
"x-thoth-is-admin": "1",
|
|
"x-authenticated-user": "must-not-be-used",
|
|
},
|
|
});
|
|
expect(authenticated.json()).toEqual({
|
|
issuer: "portal", subject: "42", displayName: "Alice", isAdmin: true,
|
|
});
|
|
});
|