Function TestFetcher_FetchTokenScopes

pkg/scopes/fetcher_test.go:86–186

(t *testing.T)

}

func TestFetcher_FetchTokenScopes(t *testing.T) {
	tests := []struct {
		name           string
		handler        http.HandlerFunc
		expectedScopes []string
		expectError    bool
		errorContains  string
	}{
		{
			name: "successful fetch with multiple scopes",
			handler: func(w http.ResponseWriter, _ *http.Request) {
				w.Header().Set("X-OAuth-Scopes", "repo, user, gist")
				w.WriteHeader(http.StatusOK)
			},
			expectedScopes: []string{"repo", "user", "gist"},
			expectError:    false,
		},
		{
			name: "successful fetch with single scope",
			handler: func(w http.ResponseWriter, _ *http.Request) {
				w.Header().Set("X-OAuth-Scopes", "repo")
				w.WriteHeader(http.StatusOK)
			},
			expectedScopes: []string{"repo"},
			expectError:    false,
		},
		{
			name: "fine-grained PAT returns empty scopes",
			handler: func(w http.ResponseWriter, _ *http.Request) {
				// Fine-grained PATs don't return X-OAuth-Scopes
				w.WriteHeader(http.StatusOK)
			},
			expectedScopes: []string{},
			expectError:    false,
		},
		{
			name: "unauthorized token",
			handler: func(w http.ResponseWriter, _ *http.Request) {
				w.WriteHeader(http.StatusUnauthorized)
			},
			expectError:   true,
			errorContains: "invalid or expired token",
		},
		{
			name: "server error",
			handler: func(w http.ResponseWriter, _ *http.Request) {
				w.WriteHeader(http.StatusInternalServerError)
			},
			expectError:   true,
			errorContains: "unexpected status code: 500",
		},
		{
			name: "verifies authorization header is set",
			handler: func(w http.ResponseWriter, r *http.Request) {
				authHeader := r.Header.Get("Authorization")
				if authHeader != "Bearer test-token" {
					w.WriteHeader(http.StatusUnauthorized)
					return