mirror of
https://github.com/pocket-id/pocket-id.git
synced 2026-05-14 00:49:52 +00:00
69 lines
2.1 KiB
Go
69 lines
2.1 KiB
Go
package service
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/pocket-id/pocket-id/backend/internal/common"
|
|
"github.com/pocket-id/pocket-id/backend/internal/model"
|
|
)
|
|
|
|
func TestCreateReauthenticationTokenWithAccessToken(t *testing.T) {
|
|
mockConfig := NewTestAppConfigService(&model.AppConfig{
|
|
SessionDuration: model.AppConfigVariable{Value: "60"},
|
|
})
|
|
|
|
setupService := func(t *testing.T) (*WebAuthnService, model.User) {
|
|
t.Helper()
|
|
|
|
jwtService, db, _ := setupJwtService(t, mockConfig)
|
|
user := model.User{
|
|
Base: model.Base{ID: "reauth-user"},
|
|
Username: "reauth-user",
|
|
}
|
|
require.NoError(t, db.Create(&user).Error)
|
|
|
|
return &WebAuthnService{
|
|
db: db,
|
|
jwtService: jwtService,
|
|
}, user
|
|
}
|
|
|
|
t.Run("accepts a fresh access token from WebAuthn login", func(t *testing.T) {
|
|
service, user := setupService(t)
|
|
accessToken, err := service.jwtService.GenerateAccessToken(user, AuthenticationMethodPhishingResistant)
|
|
require.NoError(t, err)
|
|
|
|
reauthenticationToken, err := service.CreateReauthenticationTokenWithAccessToken(t.Context(), accessToken)
|
|
|
|
require.NoError(t, err)
|
|
assert.NotEmpty(t, reauthenticationToken)
|
|
})
|
|
|
|
t.Run("rejects a fresh access token from one-time access login", func(t *testing.T) {
|
|
service, user := setupService(t)
|
|
accessToken, err := service.jwtService.GenerateAccessToken(user, AuthenticationMethodOneTimePassword)
|
|
require.NoError(t, err)
|
|
|
|
reauthenticationToken, err := service.CreateReauthenticationTokenWithAccessToken(t.Context(), accessToken)
|
|
|
|
assert.Empty(t, reauthenticationToken)
|
|
require.Error(t, err)
|
|
assert.ErrorAs(t, err, new(*common.ReauthenticationRequiredError))
|
|
})
|
|
|
|
t.Run("rejects a fresh access token without an authentication method", func(t *testing.T) {
|
|
service, user := setupService(t)
|
|
accessToken, err := service.jwtService.GenerateAccessToken(user, "")
|
|
require.NoError(t, err)
|
|
|
|
reauthenticationToken, err := service.CreateReauthenticationTokenWithAccessToken(t.Context(), accessToken)
|
|
|
|
assert.Empty(t, reauthenticationToken)
|
|
require.Error(t, err)
|
|
assert.ErrorAs(t, err, new(*common.ReauthenticationRequiredError))
|
|
})
|
|
}
|