Method TestMaybeLoadUserOrSession

internal/api/auth_test.go:192–314

()

}

func (ts *AuthTestSuite) TestMaybeLoadUserOrSession() {
	u, err := models.FindUserByEmailAndAudience(ts.API.db, "test@example.com", ts.Config.JWT.Aud)
	require.NoError(ts.T(), err)

	s, err := models.NewSession(u.ID, nil)
	require.NoError(ts.T(), err)
	require.NoError(ts.T(), ts.API.db.Create(s))

	require.NoError(ts.T(), ts.API.db.Load(s))

	cases := []struct {
		Desc            string
		UserJwtClaims   *AccessTokenClaims
		ExpectedError   error
		ExpectedUser    *models.User
		ExpectedSession *models.Session
	}{
		{
			Desc: "Missing Subject Claim",
			UserJwtClaims: &AccessTokenClaims{
				RegisteredClaims: jwt.RegisteredClaims{
					Subject: "",
				},
				Role: "authenticated",
			},
			ExpectedError: apierrors.NewForbiddenError(apierrors.ErrorCodeBadJWT, "invalid claim: missing sub claim"),
			ExpectedUser:  nil,
		},
		{
			Desc: "Valid Subject Claim",
			UserJwtClaims: &AccessTokenClaims{
				RegisteredClaims: jwt.RegisteredClaims{
					Subject: u.ID.String(),
				},
				Role: "authenticated",
			},
			ExpectedError: nil,
			ExpectedUser:  u,
		},
		{
			Desc: "Invalid Subject Claim",
			UserJwtClaims: &AccessTokenClaims{
				RegisteredClaims: jwt.RegisteredClaims{
					Subject: "invalid-subject-claim",
				},
				Role: "authenticated",
			},
			ExpectedError: apierrors.NewBadRequestError(apierrors.ErrorCodeBadJWT, "invalid claim: sub claim must be a UUID"),
			ExpectedUser:  nil,
		},
		{
			Desc: "Empty Session ID Claim",
			UserJwtClaims: &AccessTokenClaims{
				RegisteredClaims: jwt.RegisteredClaims{
					Subject: u.ID.String(),
				},
				Role:      "authenticated",
				SessionId: "",