(t *testing.T)
| 29 | } |
| 30 | |
| 31 | func TestValidate(t *testing.T) { |
| 32 | expectedIdent := Identity{ |
| 33 | TenantID: "test_tenant_id", |
| 34 | UserID: "test_user_id", |
| 35 | } |
| 36 | token, err := GenerateAccessToken(testKeyID, testKeyFile, 1*time.Hour, |
| 37 | testAudience, "https://testdomain", "test_tenant_id", "test_user_id") |
| 38 | require.NoError(t, err) |
| 39 | validator := testValidator(t) |
| 40 | |
| 41 | ident, err := validator.Validate(token) |
| 42 | require.NoError(t, err) |
| 43 | require.Equal(t, expectedIdent, ident) |
| 44 | |
| 45 | req, err := http.NewRequest("GET", "https://testdomain", nil) |
| 46 | require.NoError(t, err) |
| 47 | req.Header.Add("Authorization", "Bearer "+token) |
| 48 | tokstr, ident, err := validator.ValidateRequest(req) |
| 49 | require.NoError(t, err) |
| 50 | require.Equal(t, expectedIdent, ident) |
| 51 | require.Equal(t, token, tokstr) |
| 52 | |
| 53 | req, err = http.NewRequest("GET", "https://testdomain", nil) |
| 54 | require.NoError(t, err) |
| 55 | _, _, err = validator.ValidateRequest(req) |
| 56 | require.Error(t, err) |
| 57 | } |
| 58 | |
| 59 | func TestValidateNoTenantIDAndUserIDClaims(t *testing.T) { |
| 60 | token, err := makeToken(testKeyID, testKeyFile, jwt.MapClaims{ |
nothing calls this directly
no test coverage detected