package auth import ( "database/sql" "testing" "time" "github.com/golang/mock/gomock" "github.com/mattermost/focalboard/server/model" "github.com/mattermost/focalboard/server/services/config" "github.com/mattermost/focalboard/server/services/store" "github.com/mattermost/focalboard/server/services/store/mockstore" "github.com/mattermost/focalboard/server/utils" "github.com/pkg/errors" "github.com/stretchr/testify/require" ) type TestHelper struct { Auth *Auth Session model.Session Store *mockstore.MockStore } var mockSession = &model.Session{ ID: utils.CreateGUID(), Token: "goodToken", UserID: "12345", CreateAt: time.Now().Unix() - 2000, UpdateAt: time.Now().Unix() - 2000, } func setupTestHelper(t *testing.T) *TestHelper { ctrl := gomock.NewController(t) defer ctrl.Finish() cfg := config.Configuration{} mockStore := mockstore.NewMockStore(ctrl) newAuth := New(&cfg, mockStore) return &TestHelper{ Auth: newAuth, Session: *mockSession, Store: mockStore, } } func TestGetSession(t *testing.T) { th := setupTestHelper(t) testcases := []struct { title string token string refreshTime int64 isError bool }{ {"fail, no token", "", 0, true}, {"fail, invalid username", "badToken", 0, true}, {"success, good token", "goodToken", 1000, false}, } th.Store.EXPECT().GetSession("badToken", gomock.Any()).Return(nil, errors.New("Invalid Token")) th.Store.EXPECT().GetSession("goodToken", gomock.Any()).Return(mockSession, nil) th.Store.EXPECT().RefreshSession(gomock.Any()).Return(nil) for _, test := range testcases { t.Run(test.title, func(t *testing.T) { if test.refreshTime > 0 { th.Auth.config.SessionRefreshTime = test.refreshTime } session, err := th.Auth.GetSession(test.token) if test.isError { require.Error(t, err) } else { require.NoError(t, err) require.NotNil(t, session) } }) } } func TestIsValidReadToken(t *testing.T) { th := setupTestHelper(t) validBlockID := "testBlockID" mockContainer := store.Container{ WorkspaceID: "testWorkspaceID", } validReadToken := "testReadToken" mockSharing := model.Sharing{ ID: "testRootID", Enabled: true, Token: validReadToken, } testcases := []struct { title string container store.Container blockID string readToken string isError bool isSuccess bool }{ {"fail, error GetRootID", mockContainer, "badBlock", "", true, false}, {"fail, rootID not found", mockContainer, "goodBlockID", "", false, false}, {"fail, sharing throws error", mockContainer, "goodBlockID2", "", true, false}, {"fail, bad readToken", mockContainer, validBlockID, "invalidReadToken", false, false}, {"success", mockContainer, validBlockID, validReadToken, false, true}, } th.Store.EXPECT().GetRootID(gomock.Eq(mockContainer), "badBlock").Return("", errors.New("invalid block")) th.Store.EXPECT().GetRootID(gomock.Eq(mockContainer), "goodBlockID").Return("rootNotFound", nil) th.Store.EXPECT().GetRootID(gomock.Eq(mockContainer), "goodBlockID2").Return("rootError", nil) th.Store.EXPECT().GetRootID(gomock.Eq(mockContainer), validBlockID).Return("testRootID", nil).Times(2) th.Store.EXPECT().GetSharing(gomock.Eq(mockContainer), "rootNotFound").Return(nil, sql.ErrNoRows) th.Store.EXPECT().GetSharing(gomock.Eq(mockContainer), "rootError").Return(nil, errors.New("another error")) th.Store.EXPECT().GetSharing(gomock.Eq(mockContainer), "testRootID").Return(&mockSharing, nil).Times(2) for _, test := range testcases { t.Run(test.title, func(t *testing.T) { success, err := th.Auth.IsValidReadToken(test.container, test.blockID, test.readToken) if test.isError { require.Error(t, err) } else { require.NoError(t, err) } if test.isSuccess { require.True(t, success) } else { require.False(t, success) } }) } }