Bugzilla – Attachment 75034 Details for
Bug 20612
Make OAuth2 use patron's client_id/secret pairs
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 20612: Unit tests
Bug-20612-Unit-tests.patch (text/plain), 2.93 KB, created by
Tomás Cohen Arazi (tcohen)
on 2018-05-03 19:10:04 UTC
(
hide
)
Description:
Bug 20612: Unit tests
Filename:
MIME Type:
Creator:
Tomás Cohen Arazi (tcohen)
Created:
2018-05-03 19:10:04 UTC
Size:
2.93 KB
patch
obsolete
>From ffe7e9cb03f9a34b202c8d175074ca5b783acb01 Mon Sep 17 00:00:00 2001 >From: Tomas Cohen Arazi <tomascohen@theke.io> >Date: Wed, 18 Apr 2018 13:32:34 -0300 >Subject: [PATCH] Bug 20612: Unit tests > >This patch makes the oauth.t tests leverage on the new Koha::ApiKey(s) >classes. It adds tests for expired tokens too. > >To test: >- Apply this patch >- Run: > $ kshell > k$ prove t/db_dependent/api/v1/oauth.t >=> FAIL: Tests should fail without the rest of the patches. > >Sponsored-by: ByWater Solutions > >Signed-off-by: Julian Maurice <julian.maurice@biblibre.com> >Signed-off-by: Benjamin Rokseth <benjamin.rokseth@deichman.no> >Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> >--- > t/db_dependent/api/v1/oauth.t | 32 ++++++++++++++++++++------------ > 1 file changed, 20 insertions(+), 12 deletions(-) > >diff --git a/t/db_dependent/api/v1/oauth.t b/t/db_dependent/api/v1/oauth.t >index eb95195b24..a07a2dba5d 100755 >--- a/t/db_dependent/api/v1/oauth.t >+++ b/t/db_dependent/api/v1/oauth.t >@@ -31,15 +31,14 @@ my $schema = Koha::Database->new->schema; > my $builder = t::lib::TestBuilder->new(); > > subtest '/oauth/token tests' => sub { >- plan tests => 19; >+ plan tests => 24; > > $schema->storage->txn_begin; > > my $patron = $builder->build_object({ > class => 'Koha::Patrons', > value => { >- surname => 'Test OAuth', >- flags => 0, >+ flags => 0 # no permissions > }, > }); > >@@ -57,17 +56,12 @@ subtest '/oauth/token tests' => sub { > ->status_is(403) > ->json_is({error => 'unauthorized_client'}); > >- my ($client_id, $client_secret) = ('client1', 'secr3t'); >- t::lib::Mocks::mock_config('api_client', { >- 'client_id' => $client_id, >- 'client_secret' => $client_secret, >- patron_id => $patron->borrowernumber, >- }); >+ my $api_key = Koha::ApiKey->new({ patron_id => $patron->id, description => 'blah' })->store; > > my $formData = { >- grant_type => 'client_credentials', >- client_id => $client_id, >- client_secret => $client_secret, >+ grant_type => 'client_credentials', >+ client_id => $api_key->client_id, >+ client_secret => $api_key->secret > }; > $t->post_ok('/api/v1/oauth/token', form => $formData) > ->status_is(200) >@@ -91,5 +85,19 @@ subtest '/oauth/token tests' => sub { > $tx->req->headers->authorization("Bearer $access_token"); > $t->request_ok($tx)->status_is(200); > >+ # expire token >+ my $token = Koha::OAuthAccessTokens->find($access_token); >+ $token->expires( time - 1 )->store; >+ $tx = $t->ua->build_tx( GET => '/api/v1/patrons' ); >+ $tx->req->headers->authorization("Bearer $access_token"); >+ $t->request_ok($tx) >+ ->status_is(401); >+ >+ # revoke key >+ $api_key->active(0)->store; >+ $t->post_ok('/api/v1/oauth/token', form => $formData) >+ ->status_is(403) >+ ->json_is({ error => 'unauthorized_client' }); >+ > $schema->storage->txn_rollback; > }; >-- >2.17.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 20612
:
74473
|
74474
|
74475
|
74483
|
74484
|
74485
|
74497
|
74498
|
74499
|
74521
|
74522
|
74523
|
74531
|
74532
|
74533
|
74534
|
74550
|
74551
|
74552
|
75024
| 75034 |
75035
|
75036
|
75037