Function testAuthScope

backend/pkg/httpserver/middlewares_test.go:108–134

(t *testing.T, path string, method string, shouldBePresent bool, expectedUserInCtx *auth.User)

}

func testAuthScope(t *testing.T, path string, method string, shouldBePresent bool, expectedUserInCtx *auth.User) {
	authMiddleware := func(next http.Handler) http.Handler {
		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
			value := r.Context().Value(backend.BearerAuthScopes)
			if shouldBePresent && value == nil {
				t.Error("did not find bearer auth scope, expected it")
			}
			if !shouldBePresent && value != nil {
				t.Error("found bearer auth scope, did not expect it")
			}
			if shouldBePresent && expectedUserInCtx != nil {
				ctx := r.Context()
				ctx = httpmiddlewares.AuthenticatedUserToContext(ctx, expectedUserInCtx)
				r = r.WithContext(ctx)
			}
			next.ServeHTTP(w, r)
		})
	}
	mockServer := &mockServerInterface{t: t, expectedUserInCtx: expectedUserInCtx, callCount: 0}
	srv := createOpenAPIServerServer("", mockServer, []func(http.Handler) http.Handler{
		recoveryMiddleware}, authMiddleware)
	s := httptest.NewServer(srv.Handler)
	defer s.Close()

	submitRequest(t, s.URL+path, method)
	mockServer.assertCallCount(1)
}

// This test ensures that the third-party OpenAPI library continues to add
// Bearer authentication scopes to the request context when the route has