Function TestSendAuthChallenge

pkg/http/middleware/token_test.go:263–321

(t *testing.T)

}

func TestSendAuthChallenge(t *testing.T) {
	tests := []struct {
		name             string
		oauthCfg         *oauth.Config
		requestPath      string
		expectedContains []string
	}{
		{
			name: "with base URL configured",
			oauthCfg: &oauth.Config{
				BaseURL: "https://mcp.example.com",
			},
			requestPath: "/api/test",
			expectedContains: []string{
				"Bearer",
				"resource_metadata=",
				"https://mcp.example.com/.well-known/oauth-protected-resource",
			},
		},
		{
			name:        "with nil config uses request host",
			oauthCfg:    nil,
			requestPath: "/api/test",
			expectedContains: []string{
				"Bearer",
				"resource_metadata=",
				"/.well-known/oauth-protected-resource",
			},
		},
		{
			name: "with resource path configured",
			oauthCfg: &oauth.Config{
				BaseURL:      "https://mcp.example.com",
				ResourcePath: "/mcp",
			},
			requestPath: "/api/test",
			expectedContains: []string{
				"Bearer",
				"resource_metadata=",
				"/mcp",
			},
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			rr := httptest.NewRecorder()
			req := httptest.NewRequest(http.MethodGet, tt.requestPath, nil)

			sendAuthChallenge(rr, req, tt.oauthCfg)

			assert.Equal(t, http.StatusUnauthorized, rr.Code)
			wwwAuth := rr.Header().Get("WWW-Authenticate")
			for _, expected := range tt.expectedContains {
				assert.Contains(t, wwwAuth, expected)
			}
		})
	}