1 files changed, 52 insertions, 0 deletions
diff --git a/BackEnd/Timeline.Tests/IntegratedTests/AuthorizationTest.cs b/BackEnd/Timeline.Tests/IntegratedTests/AuthorizationTest.cs
new file mode 100644
index 00000000..38071394
--- /dev/null
+++ b/BackEnd/Timeline.Tests/IntegratedTests/AuthorizationTest.cs
@@ -0,0 +1,52 @@
+using FluentAssertions;
+using System.Net;
+using System.Threading.Tasks;
+using Timeline.Tests.Helpers;
+using Xunit;
+
+namespace Timeline.Tests.IntegratedTests
+{
+    public class AuthorizationTest : IntegratedTestBase
+    {
+        private const string BaseUrl = "testing/auth/";
+        private const string AuthorizeUrl = BaseUrl + "Authorize";
+        private const string UserUrl = BaseUrl + "User";
+        private const string AdminUrl = BaseUrl + "Admin";
+
+        [Fact]
+        public async Task UnauthenticationTest()
+        {
+            using var client = await CreateDefaultClient();
+            var response = await client.GetAsync(AuthorizeUrl);
+            response.Should().HaveStatusCode(HttpStatusCode.Unauthorized);
+        }
+
+        [Fact]
+        public async Task AuthenticationTest()
+        {
+            using var client = await CreateClientAsUser();
+            var response = await client.GetAsync(AuthorizeUrl);
+            response.Should().HaveStatusCode(HttpStatusCode.OK);
+        }
+
+        [Fact]
+        public async Task UserAuthorizationTest()
+        {
+            using var client = await CreateClientAsUser();
+            var response1 = await client.GetAsync(UserUrl);
+            response1.Should().HaveStatusCode(HttpStatusCode.OK);
+            var response2 = await client.GetAsync(AdminUrl);
+            response2.Should().HaveStatusCode(HttpStatusCode.Forbidden);
+        }
+
+        [Fact]
+        public async Task AdminAuthorizationTest()
+        {
+            using var client = await CreateClientAsAdministrator();
+            var response1 = await client.GetAsync(UserUrl);
+            response1.Should().HaveStatusCode(HttpStatusCode.OK);
+            var response2 = await client.GetAsync(AdminUrl);
+            response2.Should().HaveStatusCode(HttpStatusCode.OK);
+        }
+    }
+}