| // Copyright 2014 The oauth2 Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style |
| // license that can be found in the LICENSE file. |
| |
| package oauth2 |
| |
| import ( |
| "errors" |
| "io/ioutil" |
| "net/http" |
| "net/http/httptest" |
| "testing" |
| |
| "golang.org/x/net/context" |
| ) |
| |
| type mockTransport struct { |
| rt func(req *http.Request) (resp *http.Response, err error) |
| } |
| |
| func (t *mockTransport) RoundTrip(req *http.Request) (resp *http.Response, err error) { |
| return t.rt(req) |
| } |
| |
| type mockCache struct { |
| token *Token |
| readErr error |
| } |
| |
| func (c *mockCache) ReadToken() (*Token, error) { |
| return c.token, c.readErr |
| } |
| |
| func (c *mockCache) WriteToken(*Token) { |
| // do nothing |
| } |
| |
| func newConf(url string) *Config { |
| return &Config{ |
| ClientID: "CLIENT_ID", |
| ClientSecret: "CLIENT_SECRET", |
| RedirectURL: "REDIRECT_URL", |
| Scopes: []string{"scope1", "scope2"}, |
| Endpoint: Endpoint{ |
| AuthURL: url + "/auth", |
| TokenURL: url + "/token", |
| }, |
| } |
| } |
| |
| func TestAuthCodeURL(t *testing.T) { |
| conf := newConf("server") |
| url := conf.AuthCodeURL("foo", AccessTypeOffline, ApprovalForce) |
| if url != "server/auth?access_type=offline&approval_prompt=force&client_id=CLIENT_ID&redirect_uri=REDIRECT_URL&response_type=code&scope=scope1+scope2&state=foo" { |
| t.Errorf("Auth code URL doesn't match the expected, found: %v", url) |
| } |
| } |
| |
| func TestAuthCodeURL_Optional(t *testing.T) { |
| conf := &Config{ |
| ClientID: "CLIENT_ID", |
| Endpoint: Endpoint{ |
| AuthURL: "/auth-url", |
| TokenURL: "/token-url", |
| }, |
| } |
| url := conf.AuthCodeURL("") |
| if url != "/auth-url?client_id=CLIENT_ID&response_type=code" { |
| t.Fatalf("Auth code URL doesn't match the expected, found: %v", url) |
| } |
| } |
| |
| func TestExchangeRequest(t *testing.T) { |
| ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| if r.URL.String() != "/token" { |
| t.Errorf("Unexpected exchange request URL, %v is found.", r.URL) |
| } |
| headerAuth := r.Header.Get("Authorization") |
| if headerAuth != "Basic Q0xJRU5UX0lEOkNMSUVOVF9TRUNSRVQ=" { |
| t.Errorf("Unexpected authorization header, %v is found.", headerAuth) |
| } |
| headerContentType := r.Header.Get("Content-Type") |
| if headerContentType != "application/x-www-form-urlencoded" { |
| t.Errorf("Unexpected Content-Type header, %v is found.", headerContentType) |
| } |
| body, err := ioutil.ReadAll(r.Body) |
| if err != nil { |
| t.Errorf("Failed reading request body: %s.", err) |
| } |
| if string(body) != "client_id=CLIENT_ID&code=exchange-code&grant_type=authorization_code&redirect_uri=REDIRECT_URL&scope=scope1+scope2" { |
| t.Errorf("Unexpected exchange payload, %v is found.", string(body)) |
| } |
| w.Header().Set("Content-Type", "application/x-www-form-urlencoded") |
| w.Write([]byte("access_token=90d64460d14870c08c81352a05dedd3465940a7c&scope=user&token_type=bearer")) |
| })) |
| defer ts.Close() |
| conf := newConf(ts.URL) |
| tok, err := conf.Exchange(NoContext, "exchange-code") |
| if err != nil { |
| t.Error(err) |
| } |
| if tok.Expired() { |
| t.Errorf("Token shouldn't be expired.") |
| } |
| if tok.AccessToken != "90d64460d14870c08c81352a05dedd3465940a7c" { |
| t.Errorf("Unexpected access token, %#v.", tok.AccessToken) |
| } |
| if tok.TokenType != "bearer" { |
| t.Errorf("Unexpected token type, %#v.", tok.TokenType) |
| } |
| scope := tok.Extra("scope") |
| if scope != "user" { |
| t.Errorf("Unexpected value for scope: %v", scope) |
| } |
| } |
| |
| func TestExchangeRequest_JSONResponse(t *testing.T) { |
| ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| if r.URL.String() != "/token" { |
| t.Errorf("Unexpected exchange request URL, %v is found.", r.URL) |
| } |
| headerAuth := r.Header.Get("Authorization") |
| if headerAuth != "Basic Q0xJRU5UX0lEOkNMSUVOVF9TRUNSRVQ=" { |
| t.Errorf("Unexpected authorization header, %v is found.", headerAuth) |
| } |
| headerContentType := r.Header.Get("Content-Type") |
| if headerContentType != "application/x-www-form-urlencoded" { |
| t.Errorf("Unexpected Content-Type header, %v is found.", headerContentType) |
| } |
| body, err := ioutil.ReadAll(r.Body) |
| if err != nil { |
| t.Errorf("Failed reading request body: %s.", err) |
| } |
| if string(body) != "client_id=CLIENT_ID&code=exchange-code&grant_type=authorization_code&redirect_uri=REDIRECT_URL&scope=scope1+scope2" { |
| t.Errorf("Unexpected exchange payload, %v is found.", string(body)) |
| } |
| w.Header().Set("Content-Type", "application/json") |
| w.Write([]byte(`{"access_token": "90d64460d14870c08c81352a05dedd3465940a7c", "scope": "user", "token_type": "bearer", "expires_in": 86400}`)) |
| })) |
| defer ts.Close() |
| conf := newConf(ts.URL) |
| tok, err := conf.Exchange(NoContext, "exchange-code") |
| if err != nil { |
| t.Error(err) |
| } |
| if tok.Expired() { |
| t.Errorf("Token shouldn't be expired.") |
| } |
| if tok.AccessToken != "90d64460d14870c08c81352a05dedd3465940a7c" { |
| t.Errorf("Unexpected access token, %#v.", tok.AccessToken) |
| } |
| if tok.TokenType != "bearer" { |
| t.Errorf("Unexpected token type, %#v.", tok.TokenType) |
| } |
| scope := tok.Extra("scope") |
| if scope != "user" { |
| t.Errorf("Unexpected value for scope: %v", scope) |
| } |
| } |
| |
| func TestExchangeRequest_BadResponse(t *testing.T) { |
| ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| w.Header().Set("Content-Type", "application/json") |
| w.Write([]byte(`{"scope": "user", "token_type": "bearer"}`)) |
| })) |
| defer ts.Close() |
| conf := newConf(ts.URL) |
| tok, err := conf.Exchange(NoContext, "code") |
| if err != nil { |
| t.Fatal(err) |
| } |
| if tok.AccessToken != "" { |
| t.Errorf("Unexpected access token, %#v.", tok.AccessToken) |
| } |
| } |
| |
| func TestExchangeRequest_BadResponseType(t *testing.T) { |
| ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| w.Header().Set("Content-Type", "application/json") |
| w.Write([]byte(`{"access_token":123, "scope": "user", "token_type": "bearer"}`)) |
| })) |
| defer ts.Close() |
| conf := newConf(ts.URL) |
| tok, err := conf.Exchange(NoContext, "exchange-code") |
| if err != nil { |
| t.Error(err) |
| } |
| if tok.AccessToken != "" { |
| t.Errorf("Unexpected access token, %#v.", tok.AccessToken) |
| } |
| } |
| |
| func TestExchangeRequest_NonBasicAuth(t *testing.T) { |
| tr := &mockTransport{ |
| rt: func(r *http.Request) (w *http.Response, err error) { |
| headerAuth := r.Header.Get("Authorization") |
| if headerAuth != "" { |
| t.Errorf("Unexpected authorization header, %v is found.", headerAuth) |
| } |
| return nil, errors.New("no response") |
| }, |
| } |
| c := &http.Client{Transport: tr} |
| conf := &Config{ |
| ClientID: "CLIENT_ID", |
| Endpoint: Endpoint{ |
| AuthURL: "https://accounts.google.com/auth", |
| TokenURL: "https://accounts.google.com/token", |
| }, |
| } |
| |
| ctx := context.WithValue(context.Background(), HTTPClient, c) |
| conf.Exchange(ctx, "code") |
| } |
| |
| func TestTokenRefreshRequest(t *testing.T) { |
| ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| if r.URL.String() == "/somethingelse" { |
| return |
| } |
| if r.URL.String() != "/token" { |
| t.Errorf("Unexpected token refresh request URL, %v is found.", r.URL) |
| } |
| headerContentType := r.Header.Get("Content-Type") |
| if headerContentType != "application/x-www-form-urlencoded" { |
| t.Errorf("Unexpected Content-Type header, %v is found.", headerContentType) |
| } |
| body, _ := ioutil.ReadAll(r.Body) |
| if string(body) != "client_id=CLIENT_ID&grant_type=refresh_token&refresh_token=REFRESH_TOKEN" { |
| t.Errorf("Unexpected refresh token payload, %v is found.", string(body)) |
| } |
| })) |
| defer ts.Close() |
| conf := newConf(ts.URL) |
| c := conf.Client(NoContext, &Token{RefreshToken: "REFRESH_TOKEN"}) |
| c.Get(ts.URL + "/somethingelse") |
| } |
| |
| func TestFetchWithNoRefreshToken(t *testing.T) { |
| ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| if r.URL.String() == "/somethingelse" { |
| return |
| } |
| if r.URL.String() != "/token" { |
| t.Errorf("Unexpected token refresh request URL, %v is found.", r.URL) |
| } |
| headerContentType := r.Header.Get("Content-Type") |
| if headerContentType != "application/x-www-form-urlencoded" { |
| t.Errorf("Unexpected Content-Type header, %v is found.", headerContentType) |
| } |
| body, _ := ioutil.ReadAll(r.Body) |
| if string(body) != "client_id=CLIENT_ID&grant_type=refresh_token&refresh_token=REFRESH_TOKEN" { |
| t.Errorf("Unexpected refresh token payload, %v is found.", string(body)) |
| } |
| })) |
| defer ts.Close() |
| conf := newConf(ts.URL) |
| c := conf.Client(NoContext, nil) |
| _, err := c.Get(ts.URL + "/somethingelse") |
| if err == nil { |
| t.Errorf("Fetch should return an error if no refresh token is set") |
| } |
| } |