Function TestHandlerRefreshSessionBySessionID

session/handler_test.go:1045–1097

(t *testing.T)

}

func TestHandlerRefreshSessionBySessionID(t *testing.T) {
	t.Parallel()

	_, reg := pkg.NewFastRegistryWithMocks(t,
		configx.WithValues(testhelpers.DefaultIdentitySchemaConfig("file://./stub/identity.schema.json")),
	)
	publicServer, adminServer, _, _ := testhelpers.NewKratosServerWithCSRFAndRouters(t, reg)

	i := identity.NewIdentity("")
	require.NoError(t, reg.IdentityManager().Create(context.Background(), i))
	s := &Session{Identity: i, ExpiresAt: time.Now().Add(5 * time.Minute)}
	require.NoError(t, reg.SessionPersister().UpsertSession(context.Background(), s))

	t.Run("case=should return 200 after refreshing one session", func(t *testing.T) {
		client := testhelpers.NewClientWithCookies(t)

		req, _ := http.NewRequest("PATCH", adminServer.URL+"/admin/sessions/"+s.ID.String()+"/extend", nil)
		res, err := client.Do(req)
		require.NoError(t, err)
		require.Equal(t, http.StatusOK, res.StatusCode)

		updatedSession, err := reg.SessionPersister().GetSession(context.Background(), s.ID, ExpandNothing)
		require.Nil(t, err)
		require.True(t, s.ExpiresAt.Before(updatedSession.ExpiresAt))
	})

	t.Run("case=should return 400 when bad UUID is sent", func(t *testing.T) {
		client := testhelpers.NewClientWithCookies(t)
		req, _ := http.NewRequest("PATCH", adminServer.URL+"/admin/sessions/BADUUID/extend", nil)
		res, err := client.Do(req)
		require.NoError(t, err)
		require.Equal(t, http.StatusBadRequest, res.StatusCode)
	})

	t.Run("case=should return 404 when calling with missing UUID", func(t *testing.T) {
		client := testhelpers.NewClientWithCookies(t)
		someID, _ := uuid.NewV4()
		req, _ := http.NewRequest("PATCH", adminServer.URL+"/admin/sessions/"+someID.String()+"/extend", nil)
		res, err := client.Do(req)
		require.NoError(t, err)
		require.Equal(t, http.StatusNotFound, res.StatusCode)
	})

	t.Run("case=should return 404 when calling puplic server", func(t *testing.T) {
		req := testhelpers.NewTestHTTPRequest(t, "PATCH", publicServer.URL+"/sessions/"+s.ID.String()+"/extend", nil)

		res, err := publicServer.Client().Do(req)
		require.NoError(t, err)
		assert.Equal(t, http.StatusNotFound, res.StatusCode)
		body := ioutilx.MustReadAll(res.Body)
		assert.NotEqual(t, gjson.GetBytes(body, "error.id").String(), "security_csrf_violation")
	})
}

type byCreatedAt []Session