80 lines
		
	
	
	
		
			1.9 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
			
		
		
	
	
			80 lines
		
	
	
	
		
			1.9 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
| defmodule Pleroma.Web.OAuth.AuthorizationTest do
 | |
|   use Pleroma.DataCase
 | |
|   alias Pleroma.Web.OAuth.{Authorization, App}
 | |
|   import Pleroma.Factory
 | |
| 
 | |
|   test "create an authorization token for a valid app" do
 | |
|     {:ok, app} =
 | |
|       Repo.insert(
 | |
|         App.register_changeset(%App{}, %{
 | |
|           client_name: "client",
 | |
|           scopes: "scope",
 | |
|           redirect_uris: "url"
 | |
|         })
 | |
|       )
 | |
| 
 | |
|     user = insert(:user)
 | |
| 
 | |
|     {:ok, auth} = Authorization.create_authorization(app, user)
 | |
| 
 | |
|     assert auth.user_id == user.id
 | |
|     assert auth.app_id == app.id
 | |
|     assert String.length(auth.token) > 10
 | |
|     assert auth.used == false
 | |
|   end
 | |
| 
 | |
|   test "use up a token" do
 | |
|     {:ok, app} =
 | |
|       Repo.insert(
 | |
|         App.register_changeset(%App{}, %{
 | |
|           client_name: "client",
 | |
|           scopes: "scope",
 | |
|           redirect_uris: "url"
 | |
|         })
 | |
|       )
 | |
| 
 | |
|     user = insert(:user)
 | |
| 
 | |
|     {:ok, auth} = Authorization.create_authorization(app, user)
 | |
| 
 | |
|     {:ok, auth} = Authorization.use_token(auth)
 | |
| 
 | |
|     assert auth.used == true
 | |
| 
 | |
|     assert {:error, "already used"} == Authorization.use_token(auth)
 | |
| 
 | |
|     expired_auth = %Authorization{
 | |
|       user_id: user.id,
 | |
|       app_id: app.id,
 | |
|       valid_until: NaiveDateTime.add(NaiveDateTime.utc_now(), -10),
 | |
|       token: "mytoken",
 | |
|       used: false
 | |
|     }
 | |
| 
 | |
|     {:ok, expired_auth} = Repo.insert(expired_auth)
 | |
| 
 | |
|     assert {:error, "token expired"} == Authorization.use_token(expired_auth)
 | |
|   end
 | |
| 
 | |
|   test "delete authorizations" do
 | |
|     {:ok, app} =
 | |
|       Repo.insert(
 | |
|         App.register_changeset(%App{}, %{
 | |
|           client_name: "client",
 | |
|           scopes: "scope",
 | |
|           redirect_uris: "url"
 | |
|         })
 | |
|       )
 | |
| 
 | |
|     user = insert(:user)
 | |
| 
 | |
|     {:ok, auth} = Authorization.create_authorization(app, user)
 | |
|     {:ok, auth} = Authorization.use_token(auth)
 | |
| 
 | |
|     {auths, _} = Authorization.delete_user_authorizations(user)
 | |
| 
 | |
|     {_, invalid} = Authorization.use_token(auth)
 | |
| 
 | |
|     assert auth != invalid
 | |
|   end
 | |
| end
 | 
