Function TestOpenIDConnectImplicitFlow

rest/oidc_api_test.go:1004–1091

E2E test that checks OpenID Connect Implicit Flow.

(t *testing.T)

// E2E test that checks OpenID Connect Implicit Flow.
func TestOpenIDConnectImplicitFlow(t *testing.T) {
	type test struct {
		name                string
		providers           auth.OIDCProviderMap
		defaultProvider     string
		expectedError       forceError
		requireExistingUser bool
	}
	tests := []test{
		{
			// Successful new user authentication against single provider
			// when auto registration is enabled.
			name: "successful user registration against single provider",
			providers: auth.OIDCProviderMap{
				"foo": mockProviderWith("foo", mockProviderRegister{}, mockProviderUserPrefix{"foo"}),
			},
			defaultProvider: "foo",
		}, {
			// Unsuccessful new user authentication against single provider
			// when auto registration is NOT enabled.
			name: "unsuccessful user registration against single provider",
			providers: auth.OIDCProviderMap{
				"foo": mockProvider("foo"),
			},
			defaultProvider: "foo",
			expectedError: forceError{
				expectedErrorCode:    http.StatusUnauthorized,
				expectedErrorMessage: ErrInvalidLogin.Message,
			},
		}, {
			name: "successful registered user authentication against single provider",
			providers: auth.OIDCProviderMap{
				"foo": mockProviderWith("foo", mockProviderUserPrefix{"foo"}),
			},
			defaultProvider:     "foo",
			requireExistingUser: true,
		},
	}
	for _, tc := range tests {
		t.Run(tc.name, func(t *testing.T) {
			mockAuthServer, err := newMockAuthServer()
			require.NoError(t, err, "Error creating mock oauth2 server")
			mockAuthServer.Start()
			defer mockAuthServer.Shutdown()
			mockAuthServer.options.issuer = mockAuthServer.URL + "/" + tc.defaultProvider
			refreshProviderConfig(tc.providers, mockAuthServer.URL)

			opts := auth.OIDCOptions{Providers: tc.providers, DefaultProvider: &tc.defaultProvider}
			restTesterConfig := RestTesterConfig{DatabaseConfig: &DatabaseConfig{DbConfig: DbConfig{OIDCConfig: &opts}}}
			restTester := NewRestTester(t, &restTesterConfig)
			defer restTester.Close()

			// Create the user first if the test requires a registered user.
			if tc.requireExistingUser {
				createUser(t, restTester, "foo_noah")
			}

			mockSyncGateway := httptest.NewServer(restTester.TestPublicHandler())