mirror of
https://github.com/penpot/penpot.git
synced 2025-03-01 10:15:59 -05:00
3074fc9ab5
* ♻️ Remove deprecated with-atomic and refactor tx-run! * ✨ Do not hold open connection for the whole clone-template operation
57 lines
1.9 KiB
Clojure
57 lines
1.9 KiB
Clojure
;; This Source Code Form is subject to the terms of the Mozilla Public
|
|
;; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
;; file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
;;
|
|
;; Copyright (c) KALEIDOS INC
|
|
|
|
(ns backend-tests.http-middleware-access-token-test
|
|
(:require
|
|
[app.db :as db]
|
|
[app.http.access-token]
|
|
[app.main :as-alias main]
|
|
[app.rpc :as-alias rpc]
|
|
[app.rpc.commands.access-token]
|
|
[app.tokens :as tokens]
|
|
[backend-tests.helpers :as th]
|
|
[clojure.test :as t]
|
|
[mockery.core :refer [with-mocks]]))
|
|
|
|
(t/use-fixtures :once th/state-init)
|
|
(t/use-fixtures :each th/database-reset)
|
|
|
|
(t/deftest soft-auth-middleware
|
|
(let [profile (th/create-profile* 1)
|
|
token (db/tx-run! th/*system* app.rpc.commands.access-token/create-access-token (:id profile) "test" nil)
|
|
|
|
request (volatile! nil)
|
|
handler (#'app.http.access-token/wrap-soft-auth
|
|
(fn [req] (vreset! request req))
|
|
th/*system*)]
|
|
|
|
(with-mocks [m1 {:target 'app.http.access-token/get-token
|
|
:return nil}]
|
|
(handler {})
|
|
(t/is (= {} @request)))
|
|
|
|
(with-mocks [m1 {:target 'app.http.access-token/get-token
|
|
:return (:token token)}]
|
|
(handler {})
|
|
|
|
(let [token-id (get @request :app.http.access-token/id)]
|
|
(t/is (= token-id (:id token)))))))
|
|
|
|
(t/deftest authz-middleware
|
|
(let [profile (th/create-profile* 1)
|
|
token (db/tx-run! th/*system* app.rpc.commands.access-token/create-access-token (:id profile) "test" nil)
|
|
request (volatile! {})
|
|
handler (#'app.http.access-token/wrap-authz
|
|
(fn [req] (vreset! request req))
|
|
th/*system*)]
|
|
|
|
(handler nil)
|
|
(t/is (nil? @request))
|
|
|
|
(handler {:app.http.access-token/id (:id token)})
|
|
(t/is (= #{} (:app.http.access-token/perms @request)))
|
|
(t/is (= (:id profile) (:app.http.access-token/profile-id @request)))))
|
|
|