gsave/controller/middleware/auth_test.go

package middleware

import (
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/stretchr/testify/require"
)

func TestAuthHandler(t *testing.T) {
	t.Run("no token provided", func(t *testing.T) {
		authMiddleware := NewAuthMiddleware([]string{"foo"})
		req, err := http.NewRequest("GET", "/hosts", nil)
		if err != nil {
			t.Fatal(err)
		}

		rr := httptest.NewRecorder()
		handler := http.Handler(
			authMiddleware.AuthHandler(
				http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
					t.Error("Should have bin blocked by the middleware")
				}),
			),
		)

		handler.ServeHTTP(rr, req)

		require.Equal(t, http.StatusBadRequest, rr.Code)
		require.Equal(t, "Missing 'Token' header\n", rr.Body.String())
	})

	t.Run("wrong token provided", func(t *testing.T) {
		authMiddleware := NewAuthMiddleware([]string{"foo"})
		req, err := http.NewRequest("GET", "/hosts", nil)
		if err != nil {
			t.Fatal(err)
		}
		req.Header.Add("Token", "bar")

		rr := httptest.NewRecorder()
		handler := http.Handler(
			authMiddleware.AuthHandler(
				http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
					t.Error("Should have bin blocked by the middleware")
				}),
			),
		)

		handler.ServeHTTP(rr, req)

		require.Equal(t, http.StatusUnauthorized, rr.Code)
		require.Equal(t, "The token is not valid\n", rr.Body.String())
	})

	t.Run("correct token provided", func(t *testing.T) {
		authMiddleware := NewAuthMiddleware([]string{"foo"})
		req, err := http.NewRequest("GET", "/hosts", nil)
		if err != nil {
			t.Fatal(err)
		}
		req.Header.Add("Token", "foo")

		rr := httptest.NewRecorder()
		handler := http.Handler(
			authMiddleware.AuthHandler(
				http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
					rw.WriteHeader(http.StatusOK)
				}),
			),
		)

		handler.ServeHTTP(rr, req)

		require.Equal(t, http.StatusOK, rr.Code)
	})

}