Files
shields/services/github/auth/acceptor.spec.js

126 lines
3.6 KiB
JavaScript

import { expect } from 'chai'
import Camp from '@shields_io/camp'
import FormData from 'form-data'
import sinon from 'sinon'
import portfinder from 'portfinder'
import queryString from 'query-string'
import nock from 'nock'
import got from '../../../core/got-test-client.js'
import GithubConstellation from '../github-constellation.js'
import { setRoutes } from './acceptor.js'
const fakeClientId = 'githubdabomb'
const fakeClientSecret = 'foobar'
describe('Github token acceptor', function () {
const oauthHelper = GithubConstellation._createOauthHelper({
private: { gh_client_id: fakeClientId, gh_client_secret: fakeClientSecret },
})
let port, baseUrl
beforeEach(async function () {
port = await portfinder.getPortPromise()
baseUrl = `http://127.0.0.1:${port}`
})
let camp
beforeEach(async function () {
camp = Camp.start({ port, hostname: '::' })
await new Promise(resolve => camp.on('listening', () => resolve()))
})
afterEach(async function () {
if (camp) {
await new Promise(resolve => camp.close(resolve))
camp = undefined
}
})
let onTokenAccepted
beforeEach(function () {
onTokenAccepted = sinon.stub()
setRoutes({
server: camp,
authHelper: oauthHelper,
onTokenAccepted,
})
})
it('should start the OAuth process', async function () {
const res = await got(`${baseUrl}/github-auth`, { followRedirect: false })
expect(res.statusCode).to.equal(302)
const qs = queryString.stringify({
client_id: fakeClientId,
redirect_uri: 'https://img.shields.io/github-auth/done',
})
const expectedLocationHeader = `https://github.com/login/oauth/authorize?${qs}`
expect(res.headers.location).to.equal(expectedLocationHeader)
})
describe('Finishing the OAuth process', function () {
context('no code is provided', function () {
it('should return an error', async function () {
const res = await got(`${baseUrl}/github-auth/done`)
expect(res.body).to.equal(
'GitHub OAuth authentication failed to provide a code.'
)
})
})
const fakeCode = '123456789'
const fakeAccessToken = 'abcdef'
context('a code is provided', function () {
let scope
beforeEach(function () {
nock.enableNetConnect(/127\.0\.0\.1/)
scope = nock('https://github.com')
.post('/login/oauth/access_token')
.reply((url, requestBody) => {
const parsedBody = queryString.parse(requestBody)
expect(parsedBody.client_id).to.equal(fakeClientId)
expect(parsedBody.client_secret).to.equal(fakeClientSecret)
expect(parsedBody.code).to.equal(fakeCode)
return [
200,
queryString.stringify({ access_token: fakeAccessToken }),
]
})
})
afterEach(function () {
// Make sure other tests will make live requests even when this test
// fails.
nock.enableNetConnect()
})
afterEach(function () {
if (scope) {
scope.done()
scope = null
}
})
afterEach(function () {
nock.cleanAll()
})
it('should finish the OAuth process', async function () {
const form = new FormData()
form.append('code', fakeCode)
const res = await got.post(`${baseUrl}/github-auth/done`, {
body: form,
})
expect(res.body).to.startWith(
'<p>Shields.io has received your app-specific GitHub user token.'
)
expect(onTokenAccepted).to.have.been.calledWith(fakeAccessToken)
})
})
})
})