Function githubSession

loop-library/worker/test/auth-votes.test.js:92–135

(env)

}

async function githubSession(env) {
  const clientNonce = "test-browser-nonce-that-is-at-least-32-chars";
  const start = await handleAuthVoteRoute(
    new Request(`${BASE}/auth/github?return_to=%2Floop-library%2Floops%2Fovernight-docs-sweep%2F&client_nonce=${clientNonce}`),
    env,
  );
  assert.equal(start.status, 200);
  const authorization = new URL((await start.json()).authorizationUrl);
  assert.equal(authorization.origin, "https://github.com");
  assert.equal(authorization.searchParams.get("scope"), "read:user");
  const state = authorization.searchParams.get("state");
  const calls = [];
  const callback = await handleAuthVoteRoute(
    new Request(`${BASE}/auth/callback/github?code=test-code&state=${encodeURIComponent(state)}`),
    env,
    {
      fetch: async (input, init = {}) => {
        calls.push({ input, init });
        if (input === "https://github.com/login/oauth/access_token") {
          return Response.json({ access_token: "github-access-token" });
        }
        if (input === "https://api.github.com/user") {
          return Response.json({ id: 42, login: "octoloop", name: "Octo Loop" });
        }
        throw new Error(`Unexpected request: ${input}`);
      },
    },
  );
  assert.equal(callback.status, 200);
  const callbackBody = await callback.text();
  assert.match(callbackBody, /sessionStorage\.setItem\("ll_session"/);
  assert.match(callbackBody, /loop-library\/loops\/overnight-docs-sweep/);
  assert.match(callbackBody, new RegExp(clientNonce));
  assert.equal(calls.length, 2);
  assert.equal(
    new Headers(calls[1].init.headers).get("Authorization"),
    "Bearer github-access-token",
  );
  const sessionMatch = callbackBody.match(
    /"sessionToken":"([A-Za-z0-9_.-]+)"/,
  );
  assert(sessionMatch, "session token missing from OAuth bridge");
  return sessionMatch[1];
}

test("GitHub OAuth creates a signed session that can cast, switch, and remove a vote", async () => {
  const env = makeEnv();