Function TestChallengeWriter_SetsHeaderOnlyOn401

internal/httpapi/middleware_test.go:51–67

TestChallengeWriter_SetsHeaderOnlyOn401 pins the WWW-Authenticate behavior: present on a 401, absent on a 2xx (e.g. public getInfo).

(t *testing.T)

// TestChallengeWriter_SetsHeaderOnlyOn401 pins the WWW-Authenticate behavior:
// present on a 401, absent on a 2xx (e.g. public getInfo).
func TestChallengeWriter_SetsHeaderOnlyOn401(t *testing.T) {
	build := func(*http.Request) string { return `Bearer realm="e2a"` }

	rec401 := httptest.NewRecorder()
	cw401 := &challengeWriter{ResponseWriter: rec401, r: httptest.NewRequest(http.MethodGet, "/v1/agents", nil), build: build}
	cw401.WriteHeader(http.StatusUnauthorized)
	if got := rec401.Header().Get("WWW-Authenticate"); got != `Bearer realm="e2a"` {
		t.Fatalf("401 WWW-Authenticate = %q, want the challenge", got)
	}

	rec200 := httptest.NewRecorder()
	cw200 := &challengeWriter{ResponseWriter: rec200, r: httptest.NewRequest(http.MethodGet, "/v1/info", nil), build: build}
	cw200.WriteHeader(http.StatusOK)
	if got := rec200.Header().Get("WWW-Authenticate"); got != "" {
		t.Fatalf("2xx must not set WWW-Authenticate, got %q", got)
	}
}