Function TestAuthenticateSingleFlight

internal/oauth/manager_test.go:284–321

(t *testing.T)

}

func TestAuthenticateSingleFlight(t *testing.T) {
	f := newFakeGitHub(t)
	m := newManager(t, f)

	// Hold the owner inside begin() (browser open blocks) so a concurrent caller
	// observes the in-progress flow rather than starting its own.
	entered := make(chan struct{})
	release := make(chan struct{})
	var once sync.Once
	m.openURL = func(u string) error {
		once.Do(func() { close(entered) })
		<-release
		return browserGet(u)
	}

	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
	defer cancel()

	ownerDone := make(chan error, 1)
	go func() {
		_, err := m.Authenticate(ctx, nil)
		ownerDone <- err
	}()

	<-entered // owner is now mid-flow with status "starting"

	out, err := m.Authenticate(ctx, nil)
	require.NoError(t, err)
	require.NotNil(t, out.UserAction)
	assert.Contains(t, out.UserAction.Message, "already in progress")

	close(release)
	require.NoError(t, <-ownerDone)

	assert.Equal(t, "gho_access", waitForToken(t, m))
	// Exactly one authorization happened despite the concurrent callers.
	assert.Equal(t, []string{"authorization_code"}, f.recordedGrants())
}