|
require 'test_helper'
|
|
|
|
class PersonalAccessTokenTest < ActiveSupport::TestCase
|
|
should validate_presence_of(:name)
|
|
should validate_presence_of(:user_id)
|
|
should validate_presence_of(:token)
|
|
should belong_to(:user)
|
|
|
|
context 'a personal access token' do
|
|
let(:user) { FactoryBot.create(:user) }
|
|
let(:token) { FactoryBot.create(:personal_access_token, :user => user) }
|
|
let(:token_value) do
|
|
token_value = token.generate_token
|
|
token.save
|
|
token_value
|
|
end
|
|
|
|
test 'calculates token salt' do
|
|
expected_salt = 'b1d5781111d84f7b3fe45a0852e59758cd7a87e5'
|
|
user = mock('user')
|
|
user.stubs(:id).returns(10)
|
|
assert_equal expected_salt, PersonalAccessToken.token_salt(user)
|
|
end
|
|
|
|
test 'generates token and token hash' do
|
|
PersonalAccessToken.stubs(:token_salt).returns('salt')
|
|
SecureRandom.stubs(:urlsafe_base64).returns('hwGtI4jE5oYBPuM5L9qS7Q')
|
|
assert_equal 'hwGtI4jE5oYBPuM5L9qS7Q', token.generate_token
|
|
assert_equal 'a3d9e47916acffb4f558fb402eaea19447f78971', token.token
|
|
end
|
|
|
|
test 'authenticate_user validates token' do
|
|
# valid token
|
|
assert_equal true, PersonalAccessToken.authenticate_user(user, token_value)
|
|
# invalid token
|
|
assert_equal false, PersonalAccessToken.authenticate_user(user, 'invalid')
|
|
end
|
|
|
|
test 'token revocation' do
|
|
assert_equal false, token.revoked
|
|
assert_equal true, token.active?
|
|
assert_includes PersonalAccessToken.active.where(:user => user), token
|
|
refute_includes PersonalAccessToken.inactive.where(:user => user), token
|
|
token.revoke!
|
|
assert_equal true, token.revoked
|
|
assert_equal false, token.active?
|
|
assert_includes PersonalAccessToken.inactive.where(:user => user), token
|
|
refute_includes PersonalAccessToken.active.where(:user => user), token
|
|
end
|
|
|
|
test 'token expiry' do
|
|
assert_equal true, token.expires?
|
|
assert_equal true, token.active?
|
|
assert_includes PersonalAccessToken.active.where(:user => user), token
|
|
refute_includes PersonalAccessToken.inactive.where(:user => user), token
|
|
token.expires_at = Date.yesterday
|
|
token.save
|
|
assert_equal true, token.expires?
|
|
assert_equal false, token.active?
|
|
assert_includes PersonalAccessToken.inactive.where(:user => user), token
|
|
refute_includes PersonalAccessToken.active.where(:user => user), token
|
|
end
|
|
end
|
|
end
|
