gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 37286: Add tests for REST authentication through Mojo apps 

Amended-by: Jonathan Druart
Add +x

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
(cherry picked from commit 58f6d7d73d)
Signed-off-by: Paul Derscheid <paul.derscheid@lmscloud.de>
This commit is contained in:
Julian Maurice 2025-01-24 10:58:12 +01:00 committed by Paul Derscheid
parent 3ae15a34cd
commit b4d6c538b7
No known key found for this signature in database
GPG Key ID: C25F9FD44CED595B
1 changed files with 57 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
t/db_dependent/mojo/rest-auth.t Executable file
View File

@ -0,0 +1,57 @@
#!/usr/bin/perl
use Modern::Perl;
use Test::More tests => 2;
use Test::Mojo;
use Koha::Database;
use t::lib::Mocks;
use t::lib::TestBuilder;
my $schema = Koha::Database->schema;
my $builder = t::lib::TestBuilder->new();
t::lib::Mocks::mock_preference( 'RESTOAuth2ClientCredentials', 1 );
subtest 'REST Authentication - Intranet' => rest_auth_subtest('Koha::App::Intranet');
subtest 'REST Authentication - OPAC' => rest_auth_subtest('Koha::App::Opac');
sub rest_auth_subtest {
my $app = shift;
return sub {
plan tests => 12;
$schema->storage->txn_begin;
my $t = Test::Mojo->new($app);
$t->post_ok('/api/v1/oauth/token')->status_is(400)->json_is( '/errors/0/message', 'Missing property.' )
->json_is( '/errors/0/path', '/grant_type' );
$t->post_ok( '/api/v1/oauth/token', form => { grant_type => 'client_credentials' } )->status_is(403)
->json_is( '/error', 'unauthorized_client' );
my $patron = $builder->build_object(
{
class => 'Koha::Patrons',
value => {
flags => 0 # no permissions
},
}
);
my $api_key = Koha::ApiKey->new( { patron_id => $patron->id, description => 'blah' } )->store;
my $client_id = $api_key->client_id;
my $client_secret = $api_key->plain_text_secret;
$t->post_ok(
'/api/v1/oauth/token',
form => { grant_type => 'client_credentials', client_id => $client_id, client_secret => $client_secret }
)->status_is(200)->json_is( '/expires_in' => 3600 )->json_is( '/token_type' => 'Bearer' )
->json_has('/access_token');
$schema->storage->txn_rollback;
}
}