@tsed/platform-test-sdk 7.12.0

package/lib/esm/tests/testAuth.js

@@ -0,0 +1,338 @@
+var OAuthMiddleware_1;
+import { __decorate, __metadata, __param } from "tslib";
+import { Context, Controller, Get, Inject, Injectable, Middleware, PlatformTest, Post, Req, UseAuth } from "@tsed/common";
+import { useDecorators } from "@tsed/core";
+import { BadRequest, Forbidden, Unauthorized } from "@tsed/exceptions";
+import { In, Returns, Security } from "@tsed/schema";
+import SuperTest from "supertest";
+import baseSpec from "../data/swagger.json";
+let TokenService = class TokenService {
+    _token = "EMPTY";
+    token(token) {
+        if (token) {
+            this._token = token;
+        }
+        return this._token;
+    }
+    isValid(token) {
+        return String(token).match(/token/);
+    }
+};
+TokenService = __decorate([
+    Injectable()
+], TokenService);
+export { TokenService };
+let OAuthMiddleware = OAuthMiddleware_1 = class OAuthMiddleware {
+    tokenService;
+    use(ctx) {
+        const { endpoint, request } = ctx;
+        const options = endpoint.get(OAuthMiddleware_1) || {};
+        if (!request.get("authorization")) {
+            throw new Unauthorized("Unauthorized");
+        }
+        if (!this.tokenService.isValid(request.get("authorization"))) {
+            throw new BadRequest("Bad token format");
+        }
+        if (options && options.role === "admin" && request.get("authorization") !== "admin_token") {
+            throw new Forbidden("Forbidden");
+        }
+        ctx.getRequest().user = {
+            id: "id",
+            name: "name"
+        };
+    }
+};
+__decorate([
+    Inject(),
+    __metadata("design:type", TokenService)
+], OAuthMiddleware.prototype, "tokenService", void 0);
+__decorate([
+    __param(0, Context()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], OAuthMiddleware.prototype, "use", null);
+OAuthMiddleware = OAuthMiddleware_1 = __decorate([
+    Middleware()
+], OAuthMiddleware);
+export function OAuth(options = {}) {
+    return useDecorators(UseAuth(OAuthMiddleware, options), Security("global_auth", ...(options.scopes || [])), In("header").Type(String).Name("Authorization").Required(), Returns(401).Description("Unauthorized"), Returns(403).Description("Forbidden"));
+}
+let TestAuthCtrl = class TestAuthCtrl {
+    tokenService;
+    authorize() {
+        this.tokenService.token("access_token");
+        return {
+            access_token: this.tokenService.token()
+        };
+    }
+    token(user) {
+        return user;
+    }
+    admin() {
+        return {
+            granted: true
+        };
+    }
+    stepUp() {
+        this.tokenService.token("admin_token");
+        return {
+            access_token: this.tokenService.token()
+        };
+    }
+};
+__decorate([
+    Inject(),
+    __metadata("design:type", TokenService)
+], TestAuthCtrl.prototype, "tokenService", void 0);
+__decorate([
+    Post("/authorize"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], TestAuthCtrl.prototype, "authorize", null);
+__decorate([
+    Get("/userinfo"),
+    OAuth(),
+    __param(0, Req("user")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], TestAuthCtrl.prototype, "token", null);
+__decorate([
+    Get("/admin"),
+    OAuth({ role: "admin", scopes: ["admin"] }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], TestAuthCtrl.prototype, "admin", null);
+__decorate([
+    Post("/stepUp"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], TestAuthCtrl.prototype, "stepUp", null);
+TestAuthCtrl = __decorate([
+    Controller("/auth")
+], TestAuthCtrl);
+export function testAuth(options) {
+    let request;
+    beforeAll(PlatformTest.bootstrap(options.server, {
+        ...options,
+        mount: {
+            "/rest": [TestAuthCtrl]
+        },
+        swagger: [
+            {
+                path: "/doc",
+                spec: baseSpec
+            }
+        ]
+    }));
+    beforeAll(() => {
+        request = SuperTest.agent(PlatformTest.callback());
+    });
+    afterAll(PlatformTest.reset);
+    describe("Scenario 1: Create token, test token and stepup token", () => {
+        it("should create a token, call /userinfo to get userinfo and try admin route", async () => {
+            await request.get("/rest/auth/userinfo").expect(401);
+            await request
+                .get("/rest/auth/userinfo")
+                .set({
+                Authorization: "wrong"
+            })
+                .expect(400);
+            const { body } = await request.post("/rest/auth/authorize").expect(200);
+            expect(body.access_token).toEqual("access_token");
+            const { body: userInfo } = await request
+                .get("/rest/auth/userinfo")
+                .set({
+                Authorization: body.access_token
+            })
+                .expect(200);
+            expect(userInfo).toEqual({
+                id: "id",
+                name: "name"
+            });
+            await request
+                .get("/rest/auth/admin")
+                .set({
+                Authorization: body.access_token
+            })
+                .expect(403);
+            const { body: { access_token } } = await request.post("/rest/auth/stepUp").expect(200);
+            expect(access_token).toEqual("admin_token");
+            const { body: result } = await request
+                .get("/rest/auth/admin")
+                .set({
+                Authorization: access_token
+            })
+                .expect(200);
+            expect(result).toEqual({
+                granted: true
+            });
+        });
+    });
+    describe("Scenario 2: GET /swagger.json", () => {
+        it("should generate the swagger.spec", async () => {
+            const { body: spec } = await request.get("/doc/swagger.json").expect(200);
+            expect(spec).toEqual({
+                openapi: "3.0.1",
+                info: {
+                    version: "1.0.0",
+                    title: "Swagger Title",
+                    description: "Swagger description",
+                    termsOfService: "http://swagger.io/terms/",
+                    contact: { email: "apiteam@swagger.io" },
+                    license: { name: "Apache 2.0", url: "http://www.apache.org/licenses/LICENSE-2.0.html" }
+                },
+                paths: {
+                    "/rest/auth/authorize": {
+                        post: {
+                            operationId: "testAuthCtrlAuthorize",
+                            responses: { "200": { description: "Success" } },
+                            parameters: [],
+                            tags: ["TestAuthCtrl"]
+                        }
+                    },
+                    "/rest/auth/userinfo": {
+                        get: {
+                            operationId: "testAuthCtrlToken",
+                            responses: {
+                                "401": {
+                                    content: { "application/json": { schema: { $ref: "#/components/schemas/Unauthorized" } } },
+                                    description: "Unauthorized"
+                                },
+                                "403": {
+                                    content: { "application/json": { schema: { $ref: "#/components/schemas/Forbidden" } } },
+                                    description: "Forbidden"
+                                }
+                            },
+                            security: [{ global_auth: [] }],
+                            parameters: [
+                                {
+                                    name: "Authorization",
+                                    required: true,
+                                    in: "header",
+                                    schema: { type: "string" }
+                                }
+                            ],
+                            tags: ["TestAuthCtrl"]
+                        }
+                    },
+                    "/rest/auth/admin": {
+                        get: {
+                            operationId: "testAuthCtrlAdmin",
+                            responses: {
+                                "401": {
+                                    content: { "application/json": { schema: { $ref: "#/components/schemas/Unauthorized" } } },
+                                    description: "Unauthorized"
+                                },
+                                "403": {
+                                    content: { "application/json": { schema: { $ref: "#/components/schemas/Forbidden" } } },
+                                    description: "Forbidden"
+                                }
+                            },
+                            security: [{ global_auth: ["admin"] }],
+                            parameters: [
+                                {
+                                    name: "Authorization",
+                                    required: true,
+                                    in: "header",
+                                    schema: { type: "string" }
+                                }
+                            ],
+                            tags: ["TestAuthCtrl"]
+                        }
+                    },
+                    "/rest/auth/stepUp": {
+                        post: {
+                            operationId: "testAuthCtrlStepUp",
+                            responses: { "200": { description: "Success" } },
+                            parameters: [],
+                            tags: ["TestAuthCtrl"]
+                        }
+                    }
+                },
+                components: {
+                    securitySchemes: {
+                        global_auth: {
+                            type: "oauth2",
+                            flows: {
+                                implicit: {
+                                    authorizationUrl: "http://petstore.swagger.io/oauth/dialog",
+                                    scopes: { admin: "Admin access" }
+                                }
+                            }
+                        }
+                    },
+                    schemas: {
+                        Unauthorized: {
+                            type: "object",
+                            properties: {
+                                name: {
+                                    type: "string",
+                                    description: "The error name",
+                                    minLength: 1,
+                                    example: "UNAUTHORIZED",
+                                    default: "UNAUTHORIZED"
+                                },
+                                message: { type: "string", description: "An error message", minLength: 1 },
+                                status: {
+                                    type: "number",
+                                    description: "The status code of the exception",
+                                    example: 401,
+                                    default: 401
+                                },
+                                errors: {
+                                    type: "array",
+                                    items: { $ref: "#/components/schemas/GenericError" },
+                                    description: "A list of related errors"
+                                },
+                                stack: { type: "string", description: "The stack trace (only in development mode)" }
+                            },
+                            required: ["name", "message", "status"]
+                        },
+                        GenericError: {
+                            type: "object",
+                            properties: {
+                                name: { type: "string", description: "The error name", minLength: 1 },
+                                message: { type: "string", description: "An error message", minLength: 1 }
+                            },
+                            additionalProperties: true,
+                            required: ["name", "message"]
+                        },
+                        Forbidden: {
+                            type: "object",
+                            properties: {
+                                name: {
+                                    type: "string",
+                                    description: "The error name",
+                                    minLength: 1,
+                                    example: "FORBIDDEN",
+                                    default: "FORBIDDEN"
+                                },
+                                message: { type: "string", description: "An error message", minLength: 1 },
+                                status: {
+                                    type: "number",
+                                    description: "The status code of the exception",
+                                    example: 403,
+                                    default: 403
+                                },
+                                errors: {
+                                    type: "array",
+                                    items: { $ref: "#/components/schemas/GenericError" },
+                                    description: "A list of related errors"
+                                },
+                                stack: { type: "string", description: "The stack trace (only in development mode)" }
+                            },
+                            required: ["name", "message", "status"]
+                        }
+                    }
+                },
+                tags: [{ name: "TestAuthCtrl" }]
+            });
+        });
+    });
+}
+//# sourceMappingURL=testAuth.js.map

package/lib/esm/tests/testAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testAuth.js","sourceRoot":"","sources":["../../../src/tests/testAuth.ts"],"names":[],"mappings":";;AAAA,OAAO,EAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAC,MAAM,cAAc,CAAC;AACxH,OAAO,EAAC,aAAa,EAAC,MAAM,YAAY,CAAC;AACzC,OAAO,EAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAC,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAC,MAAM,cAAc,CAAC;AACnD,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAI5C,IAAa,YAAY,GAAzB,MAAa,YAAY;IACf,MAAM,GAAW,OAAO,CAAC;IAEjC,KAAK,CAAC,KAAc;QAClB,IAAI,KAAK,EAAE;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;SACrB;QAED,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,KAAyB;QAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;CACF,CAAA;AAdY,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAcxB;SAdY,YAAY;AAiBzB,IAAM,eAAe,uBAArB,MAAM,eAAe;IAEnB,YAAY,CAAe;IAEpB,GAAG,CAAY,GAAY;QAChC,MAAM,EAAC,QAAQ,EAAE,OAAO,EAAC,GAAG,GAAG,CAAC;QAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAe,CAAC,IAAI,EAAE,CAAC;QAEpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;YACjC,MAAM,IAAI,YAAY,CAAC,cAAc,CAAC,CAAC;SACxC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE;YAC5D,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;SAC1C;QAED,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,aAAa,EAAE;YACzF,MAAM,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;SAClC;QAED,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG;YACtB,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM;SACb,CAAC;IACJ,CAAC;CACF,CAAA;AAxBC;IADC,MAAM,EAAE;8BACK,YAAY;qDAAC;AAE3B;IAAY,WAAA,OAAO,EAAE,CAAA;;;;0CAqBpB;AAzBG,eAAe;IADpB,UAAU,EAAE;GACP,eAAe,CA0BpB;AAED,MAAM,UAAU,KAAK,CAAC,UAAe,EAAE;IACrC,OAAO,aAAa,CAClB,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,EACjC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAClD,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,EAC1D,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,EACxC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CACtC,CAAC;AACJ,CAAC;AAGD,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEhB,YAAY,CAAe;IAG3B,SAAS;QACP,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAExC,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE;SACxC,CAAC;IACJ,CAAC;IAID,KAAK,CAAc,IAAS;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAID,KAAK;QACH,OAAO;YACL,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAGD,MAAM;QACJ,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAEvC,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE;SACxC,CAAC;IACJ,CAAC;CACF,CAAA;AAjCC;IADC,MAAM,EAAE;8BACK,YAAY;kDAAC;AAG3B;IADC,IAAI,CAAC,YAAY,CAAC;;;;6CAOlB;AAID;IAFC,GAAG,CAAC,WAAW,CAAC;IAChB,KAAK,EAAE;IACD,WAAA,GAAG,CAAC,MAAM,CAAC,CAAA;;;;yCAEjB;AAID;IAFC,GAAG,CAAC,QAAQ,CAAC;IACb,KAAK,CAAC,EAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAC,CAAC;;;;yCAKzC;AAGD;IADC,IAAI,CAAC,SAAS,CAAC;;;;0CAOf;AAlCG,YAAY;IADjB,UAAU,CAAC,OAAO,CAAC;GACd,YAAY,CAmCjB;AAED,MAAM,UAAU,QAAQ,CAAC,OAA+B;IACtD,IAAI,OAA4C,CAAC;IAEjD,SAAS,CACP,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE;QACrC,GAAG,OAAO;QACV,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,YAAY,CAAC;SACxB;QACD,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAe;aACtB;SACF;KACF,CAAC,CACH,CAAC;IACF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAE7B,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACrE,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YACzF,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,OAAO;iBACV,GAAG,CAAC,qBAAqB,CAAC;iBAC1B,GAAG,CAAC;gBACH,aAAa,EAAE,OAAO;aACvB,CAAC;iBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,EAAC,IAAI,EAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEtE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAElD,MAAM,EAAC,IAAI,EAAE,QAAQ,EAAC,GAAG,MAAM,OAAO;iBACnC,GAAG,CAAC,qBAAqB,CAAC;iBAC1B,GAAG,CAAC;gBACH,aAAa,EAAE,IAAI,CAAC,YAAY;aACjC,CAAC;iBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;gBACvB,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YAEH,MAAM,OAAO;iBACV,GAAG,CAAC,kBAAkB,CAAC;iBACvB,GAAG,CAAC;gBACH,aAAa,EAAE,IAAI,CAAC,YAAY;aACjC,CAAC;iBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,EACJ,IAAI,EAAE,EAAC,YAAY,EAAC,EACrB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAExD,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAE5C,MAAM,EAAC,IAAI,EAAE,MAAM,EAAC,GAAG,MAAM,OAAO;iBACjC,GAAG,CAAC,kBAAkB,CAAC;iBACvB,GAAG,CAAC;gBACH,aAAa,EAAE,YAAY;aAC5B,CAAC;iBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YAEf,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAExE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBACnB,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE;oBACJ,OAAO,EAAE,OAAO;oBAChB,KAAK,EAAE,eAAe;oBACtB,WAAW,EAAE,qBAAqB;oBAClC,cAAc,EAAE,0BAA0B;oBAC1C,OAAO,EAAE,EAAC,KAAK,EAAE,oBAAoB,EAAC;oBACtC,OAAO,EAAE,EAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,iDAAiD,EAAC;iBACtF;gBACD,KAAK,EAAE;oBACL,sBAAsB,EAAE;wBACtB,IAAI,EAAE;4BACJ,WAAW,EAAE,uBAAuB;4BACpC,SAAS,EAAE,EAAC,KAAK,EAAE,EAAC,WAAW,EAAE,SAAS,EAAC,EAAC;4BAC5C,UAAU,EAAE,EAAE;4BACd,IAAI,EAAE,CAAC,cAAc,CAAC;yBACvB;qBACF;oBACD,qBAAqB,EAAE;wBACrB,GAAG,EAAE;4BACH,WAAW,EAAE,mBAAmB;4BAChC,SAAS,EAAE;gCACT,KAAK,EAAE;oCACL,OAAO,EAAE,EAAC,kBAAkB,EAAE,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,mCAAmC,EAAC,EAAC,EAAC;oCACpF,WAAW,EAAE,cAAc;iCAC5B;gCACD,KAAK,EAAE;oCACL,OAAO,EAAE,EAAC,kBAAkB,EAAE,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,gCAAgC,EAAC,EAAC,EAAC;oCACjF,WAAW,EAAE,WAAW;iCACzB;6BACF;4BACD,QAAQ,EAAE,CAAC,EAAC,WAAW,EAAE,EAAE,EAAC,CAAC;4BAC7B,UAAU,EAAE;gCACV;oCACE,IAAI,EAAE,eAAe;oCACrB,QAAQ,EAAE,IAAI;oCACd,EAAE,EAAE,QAAQ;oCACZ,MAAM,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;iCACzB;6BACF;4BACD,IAAI,EAAE,CAAC,cAAc,CAAC;yBACvB;qBACF;oBACD,kBAAkB,EAAE;wBAClB,GAAG,EAAE;4BACH,WAAW,EAAE,mBAAmB;4BAChC,SAAS,EAAE;gCACT,KAAK,EAAE;oCACL,OAAO,EAAE,EAAC,kBAAkB,EAAE,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,mCAAmC,EAAC,EAAC,EAAC;oCACpF,WAAW,EAAE,cAAc;iCAC5B;gCACD,KAAK,EAAE;oCACL,OAAO,EAAE,EAAC,kBAAkB,EAAE,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,gCAAgC,EAAC,EAAC,EAAC;oCACjF,WAAW,EAAE,WAAW;iCACzB;6BACF;4BACD,QAAQ,EAAE,CAAC,EAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAC,CAAC;4BACpC,UAAU,EAAE;gCACV;oCACE,IAAI,EAAE,eAAe;oCACrB,QAAQ,EAAE,IAAI;oCACd,EAAE,EAAE,QAAQ;oCACZ,MAAM,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;iCACzB;6BACF;4BACD,IAAI,EAAE,CAAC,cAAc,CAAC;yBACvB;qBACF;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE;4BACJ,WAAW,EAAE,oBAAoB;4BACjC,SAAS,EAAE,EAAC,KAAK,EAAE,EAAC,WAAW,EAAE,SAAS,EAAC,EAAC;4BAC5C,UAAU,EAAE,EAAE;4BACd,IAAI,EAAE,CAAC,cAAc,CAAC;yBACvB;qBACF;iBACF;gBACD,UAAU,EAAE;oBACV,eAAe,EAAE;wBACf,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE;gCACL,QAAQ,EAAE;oCACR,gBAAgB,EAAE,yCAAyC;oCAC3D,MAAM,EAAE,EAAC,KAAK,EAAE,cAAc,EAAC;iCAChC;6BACF;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,YAAY,EAAE;4BACZ,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,IAAI,EAAE;oCACJ,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,gBAAgB;oCAC7B,SAAS,EAAE,CAAC;oCACZ,OAAO,EAAE,cAAc;oCACvB,OAAO,EAAE,cAAc;iCACxB;gCACD,OAAO,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,EAAC;gCACxE,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,kCAAkC;oCAC/C,OAAO,EAAE,GAAG;oCACZ,OAAO,EAAE,GAAG;iCACb;gCACD,MAAM,EAAE;oCACN,IAAI,EAAE,OAAO;oCACb,KAAK,EAAE,EAAC,IAAI,EAAE,mCAAmC,EAAC;oCAClD,WAAW,EAAE,0BAA0B;iCACxC;gCACD,KAAK,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAC;6BACnF;4BACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;yBACxC;wBACD,YAAY,EAAE;4BACZ,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,IAAI,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,EAAC;gCACnE,OAAO,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,EAAC;6BACzE;4BACD,oBAAoB,EAAE,IAAI;4BAC1B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;yBAC9B;wBACD,SAAS,EAAE;4BACT,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,IAAI,EAAE;oCACJ,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,gBAAgB;oCAC7B,SAAS,EAAE,CAAC;oCACZ,OAAO,EAAE,WAAW;oCACpB,OAAO,EAAE,WAAW;iCACrB;gCACD,OAAO,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,EAAC;gCACxE,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,kCAAkC;oCAC/C,OAAO,EAAE,GAAG;oCACZ,OAAO,EAAE,GAAG;iCACb;gCACD,MAAM,EAAE;oCACN,IAAI,EAAE,OAAO;oCACb,KAAK,EAAE,EAAC,IAAI,EAAE,mCAAmC,EAAC;oCAClD,WAAW,EAAE,0BAA0B;iCACxC;gCACD,KAAK,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAC;6BACnF;4BACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;yBACxC;qBACF;iBACF;gBACD,IAAI,EAAE,CAAC,EAAC,IAAI,EAAE,cAAc,EAAC,CAAC;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {Context, Controller, Get, Inject, Injectable, Middleware, PlatformTest, Post, Req, UseAuth} from \"@tsed/common\";\nimport {useDecorators} from \"@tsed/core\";\nimport {BadRequest, Forbidden, Unauthorized} from \"@tsed/exceptions\";\nimport {In, Returns, Security} from \"@tsed/schema\";\nimport SuperTest from \"supertest\";\nimport baseSpec from \"../data/swagger.json\";\nimport {PlatformTestingSdkOpts} from \"../interfaces\";\n\n@Injectable()\nexport class TokenService {\n  private _token: string = \"EMPTY\";\n\n  token(token?: string) {\n    if (token) {\n      this._token = token;\n    }\n\n    return this._token;\n  }\n\n  isValid(token: string | undefined) {\n    return String(token).match(/token/);\n  }\n}\n\n@Middleware()\nclass OAuthMiddleware {\n  @Inject()\n  tokenService: TokenService;\n\n  public use(@Context() ctx: Context) {\n    const {endpoint, request} = ctx;\n\n    const options = endpoint.get(OAuthMiddleware) || {};\n\n    if (!request.get(\"authorization\")) {\n      throw new Unauthorized(\"Unauthorized\");\n    }\n\n    if (!this.tokenService.isValid(request.get(\"authorization\"))) {\n      throw new BadRequest(\"Bad token format\");\n    }\n\n    if (options && options.role === \"admin\" && request.get(\"authorization\") !== \"admin_token\") {\n      throw new Forbidden(\"Forbidden\");\n    }\n\n    ctx.getRequest().user = {\n      id: \"id\",\n      name: \"name\"\n    };\n  }\n}\n\nexport function OAuth(options: any = {}): Function {\n  return useDecorators(\n    UseAuth(OAuthMiddleware, options),\n    Security(\"global_auth\", ...(options.scopes || [])),\n    In(\"header\").Type(String).Name(\"Authorization\").Required(),\n    Returns(401).Description(\"Unauthorized\"),\n    Returns(403).Description(\"Forbidden\")\n  );\n}\n\n@Controller(\"/auth\")\nclass TestAuthCtrl {\n  @Inject()\n  tokenService: TokenService;\n\n  @Post(\"/authorize\")\n  authorize() {\n    this.tokenService.token(\"access_token\");\n\n    return {\n      access_token: this.tokenService.token()\n    };\n  }\n\n  @Get(\"/userinfo\")\n  @OAuth()\n  token(@Req(\"user\") user: any) {\n    return user;\n  }\n\n  @Get(\"/admin\")\n  @OAuth({role: \"admin\", scopes: [\"admin\"]})\n  admin() {\n    return {\n      granted: true\n    };\n  }\n\n  @Post(\"/stepUp\")\n  stepUp() {\n    this.tokenService.token(\"admin_token\");\n\n    return {\n      access_token: this.tokenService.token()\n    };\n  }\n}\n\nexport function testAuth(options: PlatformTestingSdkOpts) {\n  let request: SuperTest.SuperTest<SuperTest.Test>;\n\n  beforeAll(\n    PlatformTest.bootstrap(options.server, {\n      ...options,\n      mount: {\n        \"/rest\": [TestAuthCtrl]\n      },\n      swagger: [\n        {\n          path: \"/doc\",\n          spec: baseSpec as any\n        }\n      ]\n    })\n  );\n  beforeAll(() => {\n    request = SuperTest.agent(PlatformTest.callback());\n  });\n  afterAll(PlatformTest.reset);\n\n  describe(\"Scenario 1: Create token, test token and stepup token\", () => {\n    it(\"should create a token, call /userinfo to get userinfo and try admin route\", async () => {\n      await request.get(\"/rest/auth/userinfo\").expect(401);\n      await request\n        .get(\"/rest/auth/userinfo\")\n        .set({\n          Authorization: \"wrong\"\n        })\n        .expect(400);\n\n      const {body} = await request.post(\"/rest/auth/authorize\").expect(200);\n\n      expect(body.access_token).toEqual(\"access_token\");\n\n      const {body: userInfo} = await request\n        .get(\"/rest/auth/userinfo\")\n        .set({\n          Authorization: body.access_token\n        })\n        .expect(200);\n\n      expect(userInfo).toEqual({\n        id: \"id\",\n        name: \"name\"\n      });\n\n      await request\n        .get(\"/rest/auth/admin\")\n        .set({\n          Authorization: body.access_token\n        })\n        .expect(403);\n\n      const {\n        body: {access_token}\n      } = await request.post(\"/rest/auth/stepUp\").expect(200);\n\n      expect(access_token).toEqual(\"admin_token\");\n\n      const {body: result} = await request\n        .get(\"/rest/auth/admin\")\n        .set({\n          Authorization: access_token\n        })\n        .expect(200);\n\n      expect(result).toEqual({\n        granted: true\n      });\n    });\n  });\n\n  describe(\"Scenario 2: GET /swagger.json\", () => {\n    it(\"should generate the swagger.spec\", async () => {\n      const {body: spec} = await request.get(\"/doc/swagger.json\").expect(200);\n\n      expect(spec).toEqual({\n        openapi: \"3.0.1\",\n        info: {\n          version: \"1.0.0\",\n          title: \"Swagger Title\",\n          description: \"Swagger description\",\n          termsOfService: \"http://swagger.io/terms/\",\n          contact: {email: \"apiteam@swagger.io\"},\n          license: {name: \"Apache 2.0\", url: \"http://www.apache.org/licenses/LICENSE-2.0.html\"}\n        },\n        paths: {\n          \"/rest/auth/authorize\": {\n            post: {\n              operationId: \"testAuthCtrlAuthorize\",\n              responses: {\"200\": {description: \"Success\"}},\n              parameters: [],\n              tags: [\"TestAuthCtrl\"]\n            }\n          },\n          \"/rest/auth/userinfo\": {\n            get: {\n              operationId: \"testAuthCtrlToken\",\n              responses: {\n                \"401\": {\n                  content: {\"application/json\": {schema: {$ref: \"#/components/schemas/Unauthorized\"}}},\n                  description: \"Unauthorized\"\n                },\n                \"403\": {\n                  content: {\"application/json\": {schema: {$ref: \"#/components/schemas/Forbidden\"}}},\n                  description: \"Forbidden\"\n                }\n              },\n              security: [{global_auth: []}],\n              parameters: [\n                {\n                  name: \"Authorization\",\n                  required: true,\n                  in: \"header\",\n                  schema: {type: \"string\"}\n                }\n              ],\n              tags: [\"TestAuthCtrl\"]\n            }\n          },\n          \"/rest/auth/admin\": {\n            get: {\n              operationId: \"testAuthCtrlAdmin\",\n              responses: {\n                \"401\": {\n                  content: {\"application/json\": {schema: {$ref: \"#/components/schemas/Unauthorized\"}}},\n                  description: \"Unauthorized\"\n                },\n                \"403\": {\n                  content: {\"application/json\": {schema: {$ref: \"#/components/schemas/Forbidden\"}}},\n                  description: \"Forbidden\"\n                }\n              },\n              security: [{global_auth: [\"admin\"]}],\n              parameters: [\n                {\n                  name: \"Authorization\",\n                  required: true,\n                  in: \"header\",\n                  schema: {type: \"string\"}\n                }\n              ],\n              tags: [\"TestAuthCtrl\"]\n            }\n          },\n          \"/rest/auth/stepUp\": {\n            post: {\n              operationId: \"testAuthCtrlStepUp\",\n              responses: {\"200\": {description: \"Success\"}},\n              parameters: [],\n              tags: [\"TestAuthCtrl\"]\n            }\n          }\n        },\n        components: {\n          securitySchemes: {\n            global_auth: {\n              type: \"oauth2\",\n              flows: {\n                implicit: {\n                  authorizationUrl: \"http://petstore.swagger.io/oauth/dialog\",\n                  scopes: {admin: \"Admin access\"}\n                }\n              }\n            }\n          },\n          schemas: {\n            Unauthorized: {\n              type: \"object\",\n              properties: {\n                name: {\n                  type: \"string\",\n                  description: \"The error name\",\n                  minLength: 1,\n                  example: \"UNAUTHORIZED\",\n                  default: \"UNAUTHORIZED\"\n                },\n                message: {type: \"string\", description: \"An error message\", minLength: 1},\n                status: {\n                  type: \"number\",\n                  description: \"The status code of the exception\",\n                  example: 401,\n                  default: 401\n                },\n                errors: {\n                  type: \"array\",\n                  items: {$ref: \"#/components/schemas/GenericError\"},\n                  description: \"A list of related errors\"\n                },\n                stack: {type: \"string\", description: \"The stack trace (only in development mode)\"}\n              },\n              required: [\"name\", \"message\", \"status\"]\n            },\n            GenericError: {\n              type: \"object\",\n              properties: {\n                name: {type: \"string\", description: \"The error name\", minLength: 1},\n                message: {type: \"string\", description: \"An error message\", minLength: 1}\n              },\n              additionalProperties: true,\n              required: [\"name\", \"message\"]\n            },\n            Forbidden: {\n              type: \"object\",\n              properties: {\n                name: {\n                  type: \"string\",\n                  description: \"The error name\",\n                  minLength: 1,\n                  example: \"FORBIDDEN\",\n                  default: \"FORBIDDEN\"\n                },\n                message: {type: \"string\", description: \"An error message\", minLength: 1},\n                status: {\n                  type: \"number\",\n                  description: \"The status code of the exception\",\n                  example: 403,\n                  default: 403\n                },\n                errors: {\n                  type: \"array\",\n                  items: {$ref: \"#/components/schemas/GenericError\"},\n                  description: \"A list of related errors\"\n                },\n                stack: {type: \"string\", description: \"The stack trace (only in development mode)\"}\n              },\n              required: [\"name\", \"message\", \"status\"]\n            }\n          }\n        },\n        tags: [{name: \"TestAuthCtrl\"}]\n      });\n    });\n  });\n}\n"]}