using FluentAssertions; using Microsoft.Extensions.DependencyInjection; using System.Collections.Generic; using System.Net.Http; using System.Threading.Tasks; using Timeline.Models.Http; using Timeline.Services.User; using Xunit; namespace Timeline.Tests.IntegratedTests { public class TokenTest : IntegratedTestBase { private const string CreateTokenUrl = "token/create"; private const string VerifyTokenUrl = "token/verify"; private static async Task CreateUserTokenAsync(HttpClient client, string username, string password, int? expireOffset = null) { return await client.TestPostAsync(CreateTokenUrl, new HttpCreateTokenRequest { Username = username, Password = password, Expire = expireOffset }); } public static IEnumerable CreateToken_InvalidModel_Data() { yield return new[] { null, "p", null }; yield return new[] { "u", null, null }; yield return new object[] { "u", "p", 2000 }; yield return new object[] { "u", "p", -1 }; } [Theory] [MemberData(nameof(CreateToken_InvalidModel_Data))] public async Task CreateToken_InvalidModel(string username, string password, int expire) { using var client = await CreateDefaultClient(); await client.TestPostAssertInvalidModelAsync(CreateTokenUrl, new HttpCreateTokenRequest { Username = username, Password = password, Expire = expire }); } public static IEnumerable CreateToken_UserCredential_Data() { yield return new[] { "usernotexist", "p" }; yield return new[] { "user1", "???" }; } [Theory] [MemberData(nameof(CreateToken_UserCredential_Data))] public async void CreateToken_UserCredential(string username, string password) { using var client = await CreateDefaultClient(); await client.TestPostAssertErrorAsync(CreateTokenUrl, new HttpCreateTokenRequest { Username = username, Password = password }, errorCode: ErrorCodes.TokenController.Create_BadCredential); } [Fact] public async Task CreateToken_Success() { using var client = await CreateDefaultClient(); var body = await client.TestPostAsync(CreateTokenUrl, new HttpCreateTokenRequest { Username = "user1", Password = "user1pw" }); body.Token.Should().NotBeNullOrWhiteSpace(); body.User.Should().BeEquivalentTo(await client.GetUserAsync("user1")); } [Fact] public async Task VerifyToken_InvalidModel() { using var client = await CreateDefaultClient(); await client.TestPostAssertInvalidModelAsync(VerifyTokenUrl, new HttpVerifyTokenRequest { Token = null! }); } [Fact] public async Task VerifyToken_BadFormat() { using var client = await CreateDefaultClient(); await client.TestPostAssertErrorAsync(VerifyTokenUrl, new HttpVerifyTokenRequest { Token = "bad token hahaha" }, errorCode: ErrorCodes.TokenController.Verify_BadFormat); } [Fact] public async Task VerifyToken_OldVersion() { using var client = await CreateDefaultClient(); var token = (await CreateUserTokenAsync(client, "user1", "user1pw")).Token; using (var scope = TestApp.Host.Services.CreateScope()) // UserService is scoped. { // create a user for test var userService = scope.ServiceProvider.GetRequiredService(); var id = await userService.GetUserIdByUsername("user1"); await userService.ModifyUser(id, new ModifyUserParams { Password = "user1pw" }); } await client.TestPostAssertErrorAsync(VerifyTokenUrl, new HttpVerifyTokenRequest { Token = token }, errorCode: ErrorCodes.TokenController.Verify_OldVersion); } [Fact] public async Task VerifyToken_UserNotExist() { using var client = await CreateDefaultClient(); var token = (await CreateUserTokenAsync(client, "user1", "user1pw")).Token; using (var scope = TestApp.Host.Services.CreateScope()) // UserDeleteService is scoped. { var userService = scope.ServiceProvider.GetRequiredService(); await userService.DeleteUser("user1"); } await client.TestPostAssertErrorAsync(VerifyTokenUrl, new HttpVerifyTokenRequest { Token = token }, errorCode: ErrorCodes.TokenController.Verify_UserNotExist); } //[Fact] //public async Task VerifyToken_Expired() //{ // using (var client = await CreateClientWithNoAuth()) // { // // I can only control the token expired time but not current time // // because verify logic is encapsuled in other library. // var mockClock = _factory.GetTestClock(); // mockClock.MockCurrentTime = DateTime.Now - TimeSpan.FromDays(2); // var token = (await client.CreateUserTokenAsync(MockUsers.UserUsername, MockUsers.UserPassword, 1)).Token; // var response = await client.PostAsJsonAsync(VerifyTokenUrl, // new VerifyTokenRequest { Token = token }); // response.Should().HaveStatusCodeBadRequest() // .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Verify_Expired); // mockClock.MockCurrentTime = null; // } //} [Fact] public async Task VerifyToken_Success() { using var client = await CreateDefaultClient(); var createTokenResult = await CreateUserTokenAsync(client, "user1", "user1pw"); var body = await client.TestPostAsync(VerifyTokenUrl, new HttpVerifyTokenRequest { Token = createTokenResult.Token }); body.User.Should().BeEquivalentTo(await client.GetUserAsync("user1")); } } }