Function TestRequestAccessTokenUsesPKCEOfflineAuthURL

cmd/auth_test.go:668–720

(t *testing.T)

}

func TestRequestAccessTokenUsesPKCEOfflineAuthURL(t *testing.T) {
	mockOAuthAppCredentials(t)

	origReadAuthorizationCode := readAuthorizationCode
	origExchangeAuthorizationCode := exchangeAuthorizationCode
	t.Cleanup(func() {
		readAuthorizationCode = origReadAuthorizationCode
		exchangeAuthorizationCode = origExchangeAuthorizationCode
	})

	const verifier = "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"
	const state = "test-oauth-state"
	generateOAuthVerifier = func() string {
		return verifier
	}
	generateOAuthState = func() string {
		return state
	}
	readAuthorizationCode = func() (string, error) {
		return "auth-code", nil
	}
	exchangeAuthorizationCode = func(ctx context.Context, conf *oauth2.Config, code string, gotVerifier string) (*oauth2.Token, error) {
		if gotVerifier != verifier {
			t.Fatalf("expected verifier %q, got %q", verifier, gotVerifier)
		}
		return &oauth2.Token{
			AccessToken:  "access-token",
			RefreshToken: "refresh-token",
			TokenType:    "Bearer",
			Expiry:       time.Now().Add(time.Hour),
		}, nil
	}

	var err error
	out := captureStdout(t, func() {
		_, err = requestAccessToken(tokenPersonal, "")
	})
	if err != nil {
		t.Fatal(err)
	}
	if !strings.Contains(out, "token_access_type=offline") {
		t.Fatalf("expected offline token access type in auth URL, got %q", out)
	}
	if !strings.Contains(out, "state=test-oauth-state") {
		t.Fatalf("expected generated OAuth state in auth URL, got %q", out)
	}
	if !strings.Contains(out, "code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM") {
		t.Fatalf("expected PKCE code challenge in auth URL, got %q", out)
	}
	if !strings.Contains(out, "code_challenge_method=S256") {
		t.Fatalf("expected PKCE S256 method in auth URL, got %q", out)
	}
}

func TestReadAppCredentialsReadsVisibleKey(t *testing.T) {
	restoreOAuthCredentials(t)