Function TestSessionLogin

rest/session_test.go:239–276

(t *testing.T)

}

func TestSessionLogin(t *testing.T) {
	rt := NewRestTester(t, &RestTesterConfig{GuestEnabled: false})
	defer rt.Close()

	// ensure guest is actually disabled
	resp := rt.SendRequest(http.MethodPut, "/db/doc", `{"hi": "there"}`)
	RequireStatus(t, resp, http.StatusUnauthorized)

	rt.CreateUser("pupshaw", []string{"*"})

	resp = rt.SendRequest(http.MethodGet, "/db/_session", "")
	RequireStatus(t, resp, http.StatusOK)

	resp = rt.SendRequest(http.MethodPost, "/db/_session", `{"name":"pupshaw", "password":"letmein"}`)
	RequireStatus(t, resp, http.StatusOK)
	cookie := resp.Header().Get("Set-Cookie")
	require.NotEmptyf(t, cookie, "Set-Cookie header not found in response: %v", resp)
	t.Logf("Set-Cookie: %s", cookie)

	headers := map[string]string{
		"Cookie": cookie,
	}
	resp = rt.SendUserRequestWithHeaders(http.MethodGet, "/db/", "", headers, "", "")
	RequireStatus(t, resp, http.StatusOK)

	// invalid password
	resp = rt.SendRequest(http.MethodPost, "/db/_session", `{"name":"pupshaw", "password":"incorrectpassword"}`)
	RequireStatus(t, resp, http.StatusUnauthorized)
	t.Logf("Set-Cookie: %s", resp.Header().Get("Set-Cookie"))
	require.Emptyf(t, resp.Header().Get("Set-Cookie"), "Set-Cookie header should not be set in response: %v", resp)

	// invalid cookie (no username available)
	headers = map[string]string{
		"Cookie": "SyncGatewaySession=123456abcdef; Path=/db; Expires=Sat, 17 Aug 2024 15:20:52 GMT",
	}
	resp = rt.SendUserRequestWithHeaders(http.MethodGet, "/db/", "", headers, "", "")
	RequireStatus(t, resp, http.StatusUnauthorized)
}

func TestCustomCookieName(t *testing.T) {