Function TestCallbackStateClientCookies

rest/oidc_api_test.go:2037–2107

Checks callback state cookie persistence across requests.

(t *testing.T)

// Checks callback state cookie persistence across requests.
func TestCallbackStateClientCookies(t *testing.T) {
	providers := auth.OIDCProviderMap{
		"foo": mockProviderWith("foo", mockProviderRegister{}, mockProviderUserPrefix{"foo"}),
	}
	authURL := "/db/_oidc?provider=foo&offline=true"
	defaultProvider := "foo"
	mockAuthServer, err := newMockAuthServer()
	require.NoError(t, err, "Error creating mock oauth2 server")
	mockAuthServer.Start()
	defer mockAuthServer.Shutdown()
	mockAuthServer.options.issuer = mockAuthServer.URL + "/" + defaultProvider
	refreshProviderConfig(providers, mockAuthServer.URL)

	opts := auth.OIDCOptions{
		Providers:       providers,
		DefaultProvider: &defaultProvider,
	}
	restTesterConfig := RestTesterConfig{
		DatabaseConfig: &DatabaseConfig{DbConfig: DbConfig{
			OIDCConfig: &opts,
		}},
	}
	restTester := NewRestTester(t, &restTesterConfig)
	defer restTester.Close()

	mockSyncGateway := httptest.NewServer(restTester.TestPublicHandler())
	defer mockSyncGateway.Close()
	mockSyncGatewayURL := mockSyncGateway.URL

	requestURL := mockSyncGatewayURL + authURL
	request, err := http.NewRequest(http.MethodGet, requestURL, nil)
	require.NoError(t, err, "Error creating new request")

	t.Run("unsuccessful auth when callback state enabled with no cookies support from client", func(t *testing.T) {
		response, err := http.DefaultClient.Do(request)
		require.NoError(t, err, "Error sending request")
		defer func() { assert.NoError(t, response.Body.Close()) }()
		expectedAuthError := forceError{
			expectedErrorCode:    http.StatusBadRequest,
			expectedErrorMessage: ErrNoStateCookie.Message,
		}
		assertHttpResponse(t, response, expectedAuthError)
	})

	t.Run("successful auth when callback state enabled with cookies support from client", func(t *testing.T) {
		jar, err := cookiejar.New(nil)
		require.NoError(t, err, "Error creating new cookie jar")
		client := &http.Client{Jar: jar}
		response, err := client.Do(request)
		require.NoError(t, err, "Error sending request")
		defer func() { assert.NoError(t, response.Body.Close()) }()
		require.Equal(t, http.StatusOK, response.StatusCode)
		var authResponseActual OIDCTokenResponse
		require.NoError(t, err, json.NewDecoder(response.Body).Decode(&authResponseActual))
		assert.NotEmpty(t, authResponseActual.SessionID, "session_id doesn't exist")
		assert.Equal(t, "foo_noah", authResponseActual.Username, "name mismatch")
	})