Function TestRefreshHandler

auth_jwt_test.go:584–629

(t *testing.T)

}

func TestRefreshHandler(t *testing.T) {
	// the middleware to test
	authMiddleware, _ := New(&GinJWTMiddleware{
		Realm:         "test zone",
		Key:           key,
		Timeout:       time.Hour,
		MaxRefresh:    time.Hour * 24,
		Authenticator: defaultAuthenticator,
	})

	handler := ginHandler(authMiddleware)

	r := gofight.New()

	// Test missing refresh token
	r.POST("/auth/refresh_token").
		Run(handler, func(r gofight.HTTPResponse, rq gofight.HTTPRequest) {
			assert.Equal(t, http.StatusBadRequest, r.Code)
		})

	// Test invalid refresh token
	r.POST("/auth/refresh_token").
		SetJSON(gofight.D{
			"refresh_token": "invalid_token",
		}).
		Run(handler, func(r gofight.HTTPResponse, rq gofight.HTTPRequest) {
			assert.Equal(t, http.StatusUnauthorized, r.Code)
		})

	// Test valid refresh token
	refreshToken := getRefreshTokenFromLogin(handler)
	if refreshToken != "" {
		r.POST("/auth/refresh_token").
			SetJSON(gofight.D{
				"refresh_token": refreshToken,
			}).
			Run(handler, func(r gofight.HTTPResponse, rq gofight.HTTPRequest) {
				assert.Equal(t, http.StatusOK, r.Code)
				// Verify we get new tokens
				accessToken := gjson.Get(r.Body.String(), "access_token")
				newRefreshToken := gjson.Get(r.Body.String(), "refresh_token")
				assert.NotEmpty(t, accessToken.String())
				assert.NotEmpty(t, newRefreshToken.String())
			})
	}
}

func TestValidRefreshToken(t *testing.T) {
	// the middleware to test