Function TestDeleteSessionForCookie

auth/session_test.go:181–220

Coverage for DeleteSessionForCookie. Mock a fake cookie with default cookie name, sessionID and expiration; Try to delete the session for the cookie. DocID for session must be deleted from the Couchbase bucket and a new cookie must be returned with no sessionID against SyncGatewaySession and Now as

(t *testing.T)

// sessionID against SyncGatewaySession and Now as the expiration value. If the cookie in
// the request is unknown, Nil would be returned from DeleteSessionForCookie.
func TestDeleteSessionForCookie(t *testing.T) {
	const defaultEndpoint = "http://localhost/"
	base.SetUpTestLogging(t, base.LevelDebug, base.KeyAuth)
	ctx := base.TestCtx(t)
	testBucket := base.GetTestBucket(t)
	defer testBucket.Close(ctx)
	dataStore := testBucket.GetSingleDataStore()
	auth := NewTestAuthenticator(t, dataStore, nil, DefaultAuthenticatorOptions(ctx))

	sessionID, err := base.GenerateRandomSecret()
	require.NoError(t, err)
	body := strings.NewReader("?")
	request, _ := http.NewRequest(http.MethodPost, defaultEndpoint, body)

	cookie := &http.Cookie{
		Name:    DefaultCookieName,
		Value:   sessionID,
		Expires: time.Now().Add(time.Duration(10)),
	}

	request.AddCookie(cookie)
	newCookie := auth.DeleteSessionForCookie(ctx, request)

	assert.NotEmpty(t, newCookie.Name)
	assert.Empty(t, newCookie.Value)
	assert.NotEmpty(t, newCookie.Expires)

	// Check delete session for cookie request with unknown cookie.
	// No new cookie must be returned from DeleteSessionForCookie; Nil.
	request, _ = http.NewRequest(http.MethodPost, defaultEndpoint, body)
	cookie = &http.Cookie{
		Name:    "Unknown",
		Value:   sessionID,
		Expires: time.Now().Add(time.Duration(10)),
	}

	request.AddCookie(cookie)
	newCookie = auth.DeleteSessionForCookie(ctx, request)
	assert.Nil(t, newCookie)
}

func TestCreateSessionChangePassword(t *testing.T) {
	testCases := []struct {