Graham McIntie
c790794191
- Fix CLOAK_KEY placeholder in nix shell (invalid base64) - Fix error HTML test assertion to match actual template - Fix Gaiia sync: read 'subnet' field instead of 'block' for IP blocks - Fix Gaiia sync: extract nested status name from subscription objects - Fix security headers tests for environment detection - Fix mobile auth tests to use raw_token - Fix LiveView test assertions to match actual template content - Fix SNMP config test expectations for test environment - Refactor: resolve all Credo complexity/nesting issues - Extract helper functions in NetBox sync, VISP sync, Sonar sync - Flatten nested conditionals in settings, integrations, alerts - Use with/validate_present pattern for connection testing
113 lines
2.9 KiB
Elixir
113 lines
2.9 KiB
Elixir
defmodule ToweropsWeb.Plugs.MobileAuthTest do
|
|
use ToweropsWeb.ConnCase, async: true
|
|
|
|
import Towerops.AccountsFixtures
|
|
|
|
alias Towerops.MobileSessions
|
|
alias ToweropsWeb.Plugs.MobileAuth
|
|
|
|
describe "init/1" do
|
|
test "returns options unchanged" do
|
|
opts = [some: :option]
|
|
assert MobileAuth.init(opts) == opts
|
|
end
|
|
|
|
test "returns empty list unchanged" do
|
|
assert MobileAuth.init([]) == []
|
|
end
|
|
end
|
|
|
|
describe "call/2 with valid authorization" do
|
|
setup do
|
|
user = user_fixture()
|
|
|
|
{:ok, session} =
|
|
MobileSessions.create_mobile_session(%{
|
|
user_id: user.id,
|
|
device_name: "Test iPhone"
|
|
})
|
|
|
|
%{user: user, session: session}
|
|
end
|
|
|
|
test "authenticates successfully with valid Bearer token", %{
|
|
conn: conn,
|
|
user: user,
|
|
session: session
|
|
} do
|
|
conn =
|
|
conn
|
|
|> put_req_header("content-type", "application/json")
|
|
|> put_req_header("authorization", "Bearer #{session.raw_token}")
|
|
|> MobileAuth.call([])
|
|
|
|
refute conn.halted
|
|
assert conn.assigns.current_user.id == user.id
|
|
assert conn.assigns.current_mobile_session.id == session.id
|
|
end
|
|
end
|
|
|
|
describe "call/2 with missing authorization" do
|
|
test "returns 401 when Authorization header is missing", %{conn: conn} do
|
|
conn =
|
|
conn
|
|
|> put_req_header("content-type", "application/json")
|
|
|> MobileAuth.call([])
|
|
|
|
assert conn.halted
|
|
assert conn.status == 401
|
|
|
|
assert json_response(conn, 401) == %{
|
|
"error" => "Authorization header is missing or invalid"
|
|
}
|
|
end
|
|
end
|
|
|
|
describe "call/2 with invalid token" do
|
|
test "returns 401 for non-existent token", %{conn: conn} do
|
|
conn =
|
|
conn
|
|
|> put_req_header("content-type", "application/json")
|
|
|> put_req_header("authorization", "Bearer invalid-token-xxx")
|
|
|> MobileAuth.call([])
|
|
|
|
assert conn.halted
|
|
assert conn.status == 401
|
|
|
|
assert json_response(conn, 401) == %{
|
|
"error" => "Invalid or expired authentication token"
|
|
}
|
|
end
|
|
end
|
|
|
|
describe "call/2 with expired session" do
|
|
setup do
|
|
user = user_fixture()
|
|
expires_at = DateTime.add(DateTime.utc_now(), -1, :day)
|
|
|
|
{:ok, session} =
|
|
MobileSessions.create_mobile_session(%{
|
|
user_id: user.id,
|
|
device_name: "Expired iPhone",
|
|
expires_at: expires_at
|
|
})
|
|
|
|
%{user: user, session: session}
|
|
end
|
|
|
|
test "returns 401 for expired session token", %{conn: conn, session: session} do
|
|
conn =
|
|
conn
|
|
|> put_req_header("content-type", "application/json")
|
|
|> put_req_header("authorization", "Bearer #{session.raw_token}")
|
|
|> MobileAuth.call([])
|
|
|
|
assert conn.halted
|
|
assert conn.status == 401
|
|
|
|
assert json_response(conn, 401) == %{
|
|
"error" => "Invalid or expired authentication token"
|
|
}
|
|
end
|
|
end
|
|
end
|