67 lines
1.7 KiB
Go
67 lines
1.7 KiB
Go
package otoauth2
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strconv"
|
|
"testing"
|
|
"time"
|
|
|
|
config "github.com/OliveTin/OliveTin/internal/config"
|
|
"github.com/stretchr/testify/assert"
|
|
"golang.org/x/oauth2"
|
|
)
|
|
|
|
func TestSweepExpiredOAuthStatesLocked(t *testing.T) {
|
|
h := &OAuth2Handler{
|
|
registeredStates: make(map[string]*oauth2State),
|
|
}
|
|
|
|
h.registeredStates["fresh"] = &oauth2State{
|
|
providerName: "test",
|
|
createdAt: time.Now(),
|
|
}
|
|
h.registeredStates["stale"] = &oauth2State{
|
|
providerName: "test",
|
|
createdAt: time.Now().Add(-2 * oauthStateMaxAge * time.Second),
|
|
}
|
|
|
|
h.sweepExpiredOAuthStatesLocked(time.Now())
|
|
|
|
_, freshFound := h.registeredStates["fresh"]
|
|
_, staleFound := h.registeredStates["stale"]
|
|
assert.True(t, freshFound)
|
|
assert.False(t, staleFound)
|
|
}
|
|
|
|
func TestHandleOAuthLoginRejectsWhenStateMapFull(t *testing.T) {
|
|
cfg := config.DefaultConfig()
|
|
cfg.AuthOAuth2Providers = map[string]*config.OAuth2Provider{
|
|
"test": {
|
|
Name: "test",
|
|
ClientID: "id",
|
|
ClientSecret: "secret",
|
|
AuthUrl: "https://example.com/auth",
|
|
TokenUrl: "https://example.com/token",
|
|
},
|
|
}
|
|
|
|
h := NewOAuth2Handler(cfg)
|
|
h.registeredStates = make(map[string]*oauth2State, oauthStateMaxEntries)
|
|
for i := 0; i < oauthStateMaxEntries; i++ {
|
|
h.registeredStates[strconv.Itoa(i)] = &oauth2State{
|
|
providerConfig: &oauth2.Config{},
|
|
providerName: "test",
|
|
createdAt: time.Now(),
|
|
}
|
|
}
|
|
|
|
req := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/oauth/login?provider=test", nil)
|
|
rec := httptest.NewRecorder()
|
|
|
|
h.HandleOAuthLogin(rec, req)
|
|
|
|
assert.Equal(t, http.StatusServiceUnavailable, rec.Code)
|
|
assert.Equal(t, oauthStateMaxEntries, len(h.registeredStates))
|
|
}
|