Function TestIsUnmatchedAuthErr

app/cli/main_test.go:101–145

(t *testing.T)

}

func TestIsUnmatchedAuthErr(t *testing.T) {
	tests := []struct {
		name string
		st   *status.Status
		want bool
	}{
		{
			name: "generic 401/Unauthenticated error is caught",
			st:   status.New(codes.Unauthenticated, "some auth error"),
			want: true,
		},
		{
			name: "JWT token expired (Unauthenticated) is caught",
			st:   toGRPCStatus(jwtMiddleware.ErrTokenExpired),
			want: true,
		},
		{
			name: "PermissionDenied is NOT caught",
			st:   status.New(codes.PermissionDenied, "forbidden"),
			want: false,
		},
		{
			name: "OK status is NOT caught",
			st:   status.New(codes.OK, ""),
			want: false,
		},
		{
			name: "Internal error is NOT caught",
			st:   status.New(codes.Internal, "internal server error"),
			want: false,
		},
		{
			name: "NotFound is NOT caught",
			st:   status.New(codes.NotFound, "not found"),
			want: false,
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			got := isUnmatchedAuthErr(tt.st)
			assert.Equal(t, tt.want, got, "isUnmatchedAuthErr()")
		})
	}
}

// TestKratosErrorsIsMasksJWTErrors demonstrates the bug that motivates our
// Message-based comparison: Kratos errors.Is() only compares Code and Reason.