Function TestTokenExchange

core/openapi/auth_test.go:177–221

(t *testing.T)

}

func TestTokenExchange(t *testing.T) {
	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		var body map[string]any
		if err := json.NewDecoder(r.Body).Decode(&body); err != nil {
			t.Errorf("decode body: %v", err)
		}
		if body["apiKeyId"] != "kid" || body["apiKeySecret"] != "ksec" {
			t.Errorf("body = %v", body)
		}
		// Mimic Salesforce MC Personalization shape — non-OAuth2 field names.
		w.Header().Set("Content-Type", "application/json")
		_ = json.NewEncoder(w).Encode(map[string]any{
			"access_token": "is-token-xyz",
			"expires_in":   "3500", // string form, on purpose
		})
	}))
	defer srv.Close()

	p, err := NewAuthProvider(AuthConfig{
		Scheme:   "token_exchange",
		TokenURL: srv.URL,
		Request: &TokenExchangeRequest{
			BodyFormat: "json",
			Body: map[string]any{
				"apiKeyId":     "kid",
				"apiKeySecret": "ksec",
			},
		},
		Response: &TokenExchangeResponse{
			TokenField:   "access_token",
			ExpiresField: "expires_in",
		},
	}, srv.Client())
	if err != nil {
		t.Fatal(err)
	}

	req := newTestRequest(t, "https://api.example.com/users")
	if err := p.Apply(context.Background(), req, nil); err != nil {
		t.Fatal(err)
	}
	if got := req.Header.Get("Authorization"); got != "Bearer is-token-xyz" {
		t.Errorf("Authorization = %q", got)
	}
}

func TestCachedTokenExpiry(t *testing.T) {
	c := &cachedToken{}