oadmin/sub2api
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

test(auth): strengthen pending oauth legacy token assertions

Browse Source
This commit is contained in:
IanShaw027
2026-04-22 11:18:09 +08:00
parent 18481a100b
commit 454873221c
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
backend/internal/handler/auth_oauth_pending_flow_test.go
View File

@@ -746,7 +746,11 @@ func TestExchangePendingOAuthCompletionExistingLoginWithSuggestedProfileSkipsAdo
}). }).
SetLocalFlowState(map[string]any{ SetLocalFlowState(map[string]any{
oauthCompletionResponseKey: map[string]any{ oauthCompletionResponseKey: map[string]any{
"redirect": "/dashboard", "access_token": "legacy-access-token",
"refresh_token": "legacy-refresh-token",
"expires_in": float64(3600),
"token_type": "Bearer",
"redirect": "/dashboard",
}, },
}). }).
SetExpiresAt(time.Now().UTC().Add(10 * time.Minute)). SetExpiresAt(time.Now().UTC().Add(10 * time.Minute)).
@@ -767,6 +771,8 @@ func TestExchangePendingOAuthCompletionExistingLoginWithSuggestedProfileSkipsAdo
payload := decodeJSONResponseData(t, recorder) payload := decodeJSONResponseData(t, recorder)
require.NotEmpty(t, payload["access_token"]) require.NotEmpty(t, payload["access_token"])
require.NotEmpty(t, payload["refresh_token"]) require.NotEmpty(t, payload["refresh_token"])
require.NotEqual(t, "legacy-access-token", payload["access_token"])
require.NotEqual(t, "legacy-refresh-token", payload["refresh_token"])
require.Equal(t, "/dashboard", payload["redirect"]) require.Equal(t, "/dashboard", payload["redirect"])
require.Equal(t, "Existing Login Example", payload["suggested_display_name"]) require.Equal(t, "Existing Login Example", payload["suggested_display_name"])
require.Equal(t, "https://cdn.example/existing-login.png", payload["suggested_avatar_url"]) require.Equal(t, "https://cdn.example/existing-login.png", payload["suggested_avatar_url"])
@@ -781,6 +787,14 @@ func TestExchangePendingOAuthCompletionExistingLoginWithSuggestedProfileSkipsAdo
storedSession, err := client.PendingAuthSession.Get(ctx, session.ID) storedSession, err := client.PendingAuthSession.Get(ctx, session.ID)
require.NoError(t, err) require.NoError(t, err)
require.NotNil(t, storedSession.ConsumedAt) require.NotNil(t, storedSession.ConsumedAt)
completion, ok := storedSession.LocalFlowState[oauthCompletionResponseKey].(map[string]any)
require.True(t, ok)
require.NotContains(t, completion, "access_token")
require.NotContains(t, completion, "refresh_token")
require.NotContains(t, completion, "expires_in")
require.NotContains(t, completion, "token_type")
require.Equal(t, "/dashboard", completion["redirect"])
} }
func TestExchangePendingOAuthCompletionBlocksBackendModeBeforeReturningTokenPayload(t *testing.T) { func TestExchangePendingOAuthCompletionBlocksBackendModeBeforeReturningTokenPayload(t *testing.T) {