254 lines
8.3 KiB
Go
254 lines
8.3 KiB
Go
|
package store
|
||
|
|
|
||
|
|
import (
|
||
|
|
"testing"
|
||
|
|
"reflect"
|
||
|
|
"time"
|
||
|
|
"orblivion/lbry-id/auth"
|
||
|
|
)
|
||
|
|
|
||
|
|
func expectTokenExists(t *testing.T, s *Store, token auth.TokenString, expectedToken auth.AuthToken) {
|
||
|
|
gotToken, err := s.GetToken(token)
|
||
|
|
if err != nil {
|
||
|
|
t.Fatalf("Unexpected error in GetToken: %+v", err)
|
||
|
|
}
|
||
|
|
if gotToken == nil || !reflect.DeepEqual(*gotToken, expectedToken) {
|
||
|
|
t.Fatalf("token: \n expected %+v\n got: %+v", expectedToken, *gotToken)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func expectTokenNotExists(t *testing.T, s *Store, token auth.TokenString) {
|
||
|
|
gotToken, err := s.GetToken(token)
|
||
|
|
if gotToken != nil || err != ErrNoToken {
|
||
|
|
t.Fatalf("Expected ErrNoToken. token: %+v err: %+v", gotToken, err)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Test insertToken, using GetToken as a helper
|
||
|
|
// Try insertToken twice with the same user and device, error the second time
|
||
|
|
func TestStoreInsertToken(t *testing.T) {
|
||
|
|
|
||
|
|
s, sqliteTmpFile := StoreTestInit(t)
|
||
|
|
defer StoreTestCleanup(sqliteTmpFile)
|
||
|
|
|
||
|
|
// created for addition to the DB (no expiration attached)
|
||
|
|
authToken1 := auth.AuthToken{
|
||
|
|
Token: "seekrit-1",
|
||
|
|
DeviceId: "dId",
|
||
|
|
Scope: "*",
|
||
|
|
UserId: 123,
|
||
|
|
}
|
||
|
|
expiration := time.Now().Add(time.Hour * 24 * 14).UTC()
|
||
|
|
|
||
|
|
// Get a token, come back empty
|
||
|
|
expectTokenNotExists(t, &s, authToken1.Token)
|
||
|
|
|
||
|
|
// Put in a token
|
||
|
|
if err := s.insertToken(&authToken1, expiration); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in insertToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// The value expected when we pull it from the database.
|
||
|
|
authToken1Expected := authToken1
|
||
|
|
authToken1Expected.Expiration = &expiration
|
||
|
|
|
||
|
|
// Get and confirm the token we just put in
|
||
|
|
expectTokenExists(t, &s, authToken1.Token, authToken1Expected)
|
||
|
|
|
||
|
|
// Try to put a different token, fail because we already have one
|
||
|
|
authToken2 := authToken1
|
||
|
|
authToken2.Token = "seekrit-2"
|
||
|
|
|
||
|
|
if err := s.insertToken(&authToken2, expiration); err != ErrDuplicateToken {
|
||
|
|
t.Fatalf(`insertToken err: wanted "%+v", got "%+v"`, ErrDuplicateToken, err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Get the same *first* token we successfully put in
|
||
|
|
expectTokenExists(t, &s, authToken1.Token, authToken1Expected)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Test updateToken, using GetToken and insertToken as helpers
|
||
|
|
// Try updateToken with no existing token, err for lack of anything to update
|
||
|
|
// Try updateToken with a preexisting token, succeed
|
||
|
|
// Try updateToken again with a new token, succeed
|
||
|
|
func TestStoreUpdateToken(t *testing.T) {
|
||
|
|
s, sqliteTmpFile := StoreTestInit(t)
|
||
|
|
defer StoreTestCleanup(sqliteTmpFile)
|
||
|
|
|
||
|
|
// created for addition to the DB (no expiration attached)
|
||
|
|
authTokenUpdate := auth.AuthToken{
|
||
|
|
Token: "seekrit-update",
|
||
|
|
DeviceId: "dId",
|
||
|
|
Scope: "*",
|
||
|
|
UserId: 123,
|
||
|
|
}
|
||
|
|
expiration := time.Now().Add(time.Hour * 24 * 14).UTC()
|
||
|
|
|
||
|
|
// Try to get a token, come back empty because we're just starting out
|
||
|
|
expectTokenNotExists(t, &s, authTokenUpdate.Token)
|
||
|
|
|
||
|
|
// Try to update the token - fail because we don't have an entry there in the first place
|
||
|
|
if err := s.updateToken(&authTokenUpdate, expiration); err != ErrNoToken {
|
||
|
|
t.Fatalf(`updateToken err: wanted "%+v", got "%+v"`, ErrNoToken, err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Try to get a token, come back empty because the update attempt failed to do anything
|
||
|
|
expectTokenNotExists(t, &s, authTokenUpdate.Token)
|
||
|
|
|
||
|
|
// Put in a different token, just so we have something to test that
|
||
|
|
// updateToken overwrites it
|
||
|
|
authTokenInsert := authTokenUpdate
|
||
|
|
authTokenInsert.Token = "seekrit-insert"
|
||
|
|
|
||
|
|
if err := s.insertToken(&authTokenInsert, expiration); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in insertToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Now successfully update token
|
||
|
|
if err := s.updateToken(&authTokenUpdate, expiration); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in updateToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// The value expected when we pull it from the database.
|
||
|
|
authTokenUpdateExpected := authTokenUpdate
|
||
|
|
authTokenUpdateExpected.Expiration = &expiration
|
||
|
|
|
||
|
|
// Get and confirm the token we just put in
|
||
|
|
expectTokenExists(t, &s, authTokenUpdate.Token, authTokenUpdateExpected)
|
||
|
|
|
||
|
|
// Fail to get the token we previously inserted, because it's now been overwritten
|
||
|
|
expectTokenNotExists(t, &s, authTokenInsert.Token)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Test that a user can have two different devices.
|
||
|
|
// Test first and second Save (one for insert, one for update)
|
||
|
|
// Get fails initially
|
||
|
|
// Put token1-d1 token1-d2
|
||
|
|
// Get token1-d1 token1-d2
|
||
|
|
// Put token2-d1 token2-d2
|
||
|
|
// Get token2-d1 token2-d2
|
||
|
|
func TestStoreSaveToken(t *testing.T) {
|
||
|
|
s, sqliteTmpFile := StoreTestInit(t)
|
||
|
|
defer StoreTestCleanup(sqliteTmpFile)
|
||
|
|
|
||
|
|
// Version 1 of the token for both devices
|
||
|
|
// created for addition to the DB (no expiration attached)
|
||
|
|
authToken_d1_1 := auth.AuthToken{
|
||
|
|
Token: "seekrit-d1-1",
|
||
|
|
DeviceId: "dId-1",
|
||
|
|
Scope: "*",
|
||
|
|
UserId: 123,
|
||
|
|
}
|
||
|
|
|
||
|
|
authToken_d2_1 := authToken_d1_1
|
||
|
|
authToken_d2_1.DeviceId = "dId-2"
|
||
|
|
authToken_d2_1.Token = "seekrit-d2-1"
|
||
|
|
|
||
|
|
// Try to get the tokens, come back empty because we're just starting out
|
||
|
|
expectTokenNotExists(t, &s, authToken_d1_1.Token)
|
||
|
|
expectTokenNotExists(t, &s, authToken_d2_1.Token)
|
||
|
|
|
||
|
|
// Save Version 1 tokens for both devices
|
||
|
|
if err := s.SaveToken(&authToken_d1_1); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in SaveToken: %+v", err)
|
||
|
|
}
|
||
|
|
if err := s.SaveToken(&authToken_d2_1); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in SaveToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check one of the authTokens to make sure expiration was set
|
||
|
|
if authToken_d1_1.Expiration == nil {
|
||
|
|
t.Fatalf("Expected SaveToken to set an Expiration")
|
||
|
|
}
|
||
|
|
nowDiff := authToken_d1_1.Expiration.Sub(time.Now().UTC())
|
||
|
|
if time.Hour*24*14+time.Minute < nowDiff || nowDiff < time.Hour*24*14-time.Minute {
|
||
|
|
t.Fatalf("Expected SaveToken to set a token Expiration 2 weeks in the future.")
|
||
|
|
}
|
||
|
|
|
||
|
|
// Get and confirm the tokens we just put in
|
||
|
|
expectTokenExists(t, &s, authToken_d1_1.Token, authToken_d1_1)
|
||
|
|
expectTokenExists(t, &s, authToken_d2_1.Token, authToken_d2_1)
|
||
|
|
|
||
|
|
// Version 2 of the token for both devices
|
||
|
|
authToken_d1_2 := authToken_d1_1
|
||
|
|
authToken_d1_2.Token = "seekrit-d1-2"
|
||
|
|
|
||
|
|
authToken_d2_2 := authToken_d2_1
|
||
|
|
authToken_d2_2.Token = "seekrit-d2-2"
|
||
|
|
|
||
|
|
// Save Version 2 tokens for both devices
|
||
|
|
if err := s.SaveToken(&authToken_d1_2); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in SaveToken: %+v", err)
|
||
|
|
}
|
||
|
|
if err := s.SaveToken(&authToken_d2_2); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in SaveToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check that the expiration of this new token is marginally later
|
||
|
|
if authToken_d1_2.Expiration == nil {
|
||
|
|
t.Fatalf("Expected SaveToken to set an Expiration")
|
||
|
|
}
|
||
|
|
expDiff := authToken_d1_2.Expiration.Sub(*authToken_d1_1.Expiration)
|
||
|
|
if time.Second < expDiff || expDiff < 0 {
|
||
|
|
t.Fatalf("Expected new expiration to be slightly later than previous expiration. diff: %+v", expDiff)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Get and confirm the tokens we just put in
|
||
|
|
expectTokenExists(t, &s, authToken_d1_2.Token, authToken_d1_2)
|
||
|
|
expectTokenExists(t, &s, authToken_d2_2.Token, authToken_d2_2)
|
||
|
|
}
|
||
|
|
|
||
|
|
// test GetToken using insertToken and updateToken as helpers (so we can set expiration timestamps)
|
||
|
|
// normal
|
||
|
|
// token not found
|
||
|
|
// expired not returned
|
||
|
|
func TestStoreGetToken(t *testing.T) {
|
||
|
|
s, sqliteTmpFile := StoreTestInit(t)
|
||
|
|
defer StoreTestCleanup(sqliteTmpFile)
|
||
|
|
|
||
|
|
// created for addition to the DB (no expiration attached)
|
||
|
|
authToken := auth.AuthToken{
|
||
|
|
Token: "seekrit-d1",
|
||
|
|
DeviceId: "dId",
|
||
|
|
Scope: "*",
|
||
|
|
UserId: 123,
|
||
|
|
}
|
||
|
|
expiration := time.Time(time.Now().UTC().Add(time.Hour * 24 * 14))
|
||
|
|
|
||
|
|
// Not found (nothing saved for this token string)
|
||
|
|
gotToken, err := s.GetToken(authToken.Token)
|
||
|
|
if gotToken != nil || err != ErrNoToken {
|
||
|
|
t.Fatalf("Expected ErrNoToken. token: %+v err: %+v", gotToken, err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Put in a token
|
||
|
|
if err := s.insertToken(&authToken, expiration); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in insertToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// The value expected when we pull it from the database.
|
||
|
|
authTokenExpected := authToken
|
||
|
|
authTokenExpected.Expiration = &expiration
|
||
|
|
|
||
|
|
// Confirm it saved
|
||
|
|
gotToken, err = s.GetToken(authToken.Token)
|
||
|
|
if err != nil {
|
||
|
|
t.Fatalf("Unexpected error in GetToken: %+v", err)
|
||
|
|
}
|
||
|
|
if gotToken == nil || !reflect.DeepEqual(*gotToken, authTokenExpected) {
|
||
|
|
t.Fatalf("token: \n expected %+v\n got: %+v", authTokenExpected, gotToken)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Update the token to be expired
|
||
|
|
expirationOld := time.Now().Add(time.Second * (-1))
|
||
|
|
if err := s.updateToken(&authToken, expirationOld); err != nil {
|
||
|
|
t.Fatalf("Unexpected error in updateToken: %+v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Fail to get the expired token
|
||
|
|
gotToken, err = s.GetToken(authToken.Token)
|
||
|
|
if gotToken != nil || err != ErrNoToken {
|
||
|
|
t.Fatalf("Expected ErrNoToken, for expired token. token: %+v err: %+v", gotToken, err)
|
||
|
|
}
|
||
|
|
}
|