Method TestVerifyCaptchaInvalid

internal/api/middleware_test.go:137–189

()

}

func (ts *MiddlewareTestSuite) TestVerifyCaptchaInvalid() {
	cases := []struct {
		desc         string
		errorCodes   []string
		expectedCode int
		expectedMsg  string
	}{
		{
			"Captcha validation failed",
			[]string{"not-using-dummy-secret"},
			http.StatusBadRequest,
			"captcha protection: request disallowed (not-using-dummy-secret)",
		},
		{
			"Captcha validation failed",
			[]string{"invalid-input-secret"},
			http.StatusBadRequest,
			"captcha protection: request disallowed (invalid-input-secret)",
		},
	}
	for _, c := range cases {
		ts.Run(c.desc, func() {
			ts.Config.Security.Captcha.Enabled = true
			ts.Config.Security.Captcha.Provider = "hcaptcha"
			ts.Config.Security.Captcha.Secret = "test-secret"

			ts.CaptchaVerifier.Result = &security.VerificationResponse{
				Success:    false,
				ErrorCodes: c.errorCodes,
			}
			ts.CaptchaVerifier.Err = nil

			var buffer bytes.Buffer
			require.NoError(ts.T(), json.NewEncoder(&buffer).Encode(map[string]interface{}{
				"email":    "test@example.com",
				"password": "secret",
				"gotrue_meta_security": map[string]interface{}{
					"captcha_token": captchaResponse,
				},
			}))
			req := httptest.NewRequest(http.MethodPost, "http://localhost", &buffer)
			req.Header.Set("Content-Type", "application/json")

			req = req.WithContext(context.Background())

			w := httptest.NewRecorder()

			_, err := ts.API.verifyCaptcha(w, req)
			require.Equal(ts.T(), c.expectedCode, err.(*HTTPError).HTTPStatus)
			require.Equal(ts.T(), c.expectedMsg, err.(*HTTPError).Message)
		})
	}
}

func (ts *MiddlewareTestSuite) TestIsValidExternalHost() {
	cases := []struct {