Function TestHandleCallback_InvalidState_Rejected

internal/auth/cli_login_test.go:386–403

(t *testing.T)

}

func TestHandleCallback_InvalidState_Rejected(t *testing.T) {
	ua, _, srv := setupUserAuthWithFakeOAuth(t)

	req := httptest.NewRequest(
		http.MethodGet,
		"/api/auth/callback?code=fake-code&state=not-valid-base64!!!",
		nil,
	)
	req.AddCookie(&http.Cookie{Name: "e2a_oauth_state", Value: "whatever"})
	_ = srv
	w := httptest.NewRecorder()

	ua.HandleCallback(w, req)

	if w.Code != http.StatusBadRequest {
		t.Fatalf("status = %d, want %d", w.Code, http.StatusBadRequest)
	}
}