acrylblends 0.6.3 → 0.7.0

package/plugins/acryl-router/src/core/middleware/basic-auth/index.test.ts

@@ -1,434 +0,0 @@
-import { createHash } from 'node:crypto'
-import { basicAuth } from './index.ts'
-import { Acryl } from '../../app.ts'
-
-describe('Basic Auth by Middleware', () => {
-  let handlerExecuted: boolean
-
-  beforeEach(() => {
-    handlerExecuted = false
-  })
-
-  const app = new Acryl()
-
-  const username = 'acryl-user-a'
-  const password = 'acryl-password-a'
-  const unicodePassword = '炎'
-
-  const usernameB = 'acryl-user-b'
-  const passwordB = 'acryl-password-b'
-
-  const usernameC = 'acryl-user-c'
-  const passwordC = 'acryl-password-c'
-
-  app.use(
-    '/auth/*',
-    basicAuth({
-      username,
-      password,
-    })
-  )
-  // Test multiple handlers
-  app.use('/auth/*', async (c, next) => {
-    c.header('x-custom', 'foo')
-    await next()
-  })
-
-  app.use(
-    '/auth-unicode/*',
-    basicAuth({
-      username: username,
-      password: unicodePassword,
-    })
-  )
-
-  app.use(
-    '/auth-multi/*',
-    basicAuth(
-      {
-        username: usernameB,
-        password: passwordB,
-      },
-      {
-        username: usernameC,
-        password: passwordC,
-      }
-    )
-  )
-
-  app.use(
-    '/auth-override-func/*',
-    basicAuth({
-      username: username,
-      password: password,
-      hashFunction: (data: string) => createHash('sha256').update(data).digest('hex'),
-    })
-  )
-
-  app.use('/nested/*', async (c, next) => {
-    const auth = basicAuth({ username: username, password: password })
-    return auth(c, next)
-  })
-
-  app.use('/verify-user/*', async (c, next) => {
-    const auth = basicAuth({
-      verifyUser: (username, password, c) => {
-        return (
-          c.req.path === '/verify-user' &&
-          username === 'dynamic-user' &&
-          password === 'acryl-password'
-        )
-      },
-    })
-    return auth(c, next)
-  })
-
-  app.use(
-    '/auth-custom-invalid-user-message-string/*',
-    basicAuth({
-      username,
-      password,
-      invalidUserMessage: 'Custom unauthorized message as string',
-    })
-  )
-
-  app.use(
-    '/auth-custom-invalid-user-message-object/*',
-    basicAuth({
-      username,
-      password,
-      invalidUserMessage: { message: 'Custom unauthorized message as object' },
-    })
-  )
-
-  app.use(
-    '/auth-custom-invalid-user-message-function-string/*',
-    basicAuth({
-      username,
-      password,
-      invalidUserMessage: () => 'Custom unauthorized message as function string',
-    })
-  )
-
-  app.use(
-    '/auth-custom-invalid-user-message-function-object/*',
-    basicAuth({
-      username,
-      password,
-      invalidUserMessage: () => ({ message: 'Custom unauthorized message as function object' }),
-    })
-  )
-
-  app.get('/auth/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-  app.get('/auth-unicode/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-  app.get('/auth-multi/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-  app.get('/auth-override-func/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-
-  app.get('/nested/*', (c) => {
-    handlerExecuted = true
-    return c.text('nested')
-  })
-
-  app.get('/verify-user', (c) => {
-    handlerExecuted = true
-    return c.text('verify-user')
-  })
-
-  app.get('/auth-custom-invalid-user-message-string/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-  app.get('/auth-custom-invalid-user-message-object/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-  app.get('/auth-custom-invalid-user-message-function-string/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-
-  app.get('/auth-custom-invalid-user-message-function-object/*', (c) => {
-    handlerExecuted = true
-    return c.text('auth')
-  })
-
-  it('Should not authorize', async () => {
-    const req = new Request('http://localhost/auth/a')
-    const res = await app.request(req)
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(handlerExecuted).toBeFalsy()
-    expect(await res.text()).toBe('Unauthorized')
-    expect(res.headers.get('x-custom')).toBeNull()
-  })
-
-  it('Should authorize', async () => {
-    const credential = Buffer.from(username + ':' + password).toString('base64')
-
-    const req = new Request('http://localhost/auth/a')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(res).not.toBeNull()
-    expect(handlerExecuted).toBeTruthy()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('auth')
-    expect(res.headers.get('x-custom')).toBe('foo')
-  })
-
-  it('Should authorize Unicode', async () => {
-    const credential = Buffer.from(username + ':' + unicodePassword).toString('base64')
-
-    const req = new Request('http://localhost/auth-unicode/a')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(handlerExecuted).toBeTruthy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('auth')
-  })
-
-  it('Should authorize multiple users', async () => {
-    let credential = Buffer.from(usernameB + ':' + passwordB).toString('base64')
-
-    let req = new Request('http://localhost/auth-multi/b')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    let res = await app.request(req)
-    expect(handlerExecuted).toBeTruthy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('auth')
-
-    handlerExecuted = false
-    credential = Buffer.from(usernameC + ':' + passwordC).toString('base64')
-    req = new Request('http://localhost/auth-multi/c')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    res = await app.request(req)
-    expect(handlerExecuted).toBeTruthy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('auth')
-  })
-
-  it('Should authorize with sha256 function override', async () => {
-    const credential = Buffer.from(username + ':' + password).toString('base64')
-
-    const req = new Request('http://localhost/auth-override-func/a')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(handlerExecuted).toBeTruthy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('auth')
-  })
-
-  it('Should authorize - nested', async () => {
-    const credential = Buffer.from(username + ':' + password).toString('base64')
-
-    const req = new Request('http://localhost/nested')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(handlerExecuted).toBeTruthy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('nested')
-  })
-
-  it('Should not authorize - nested', async () => {
-    const credential = Buffer.from('foo' + ':' + 'bar').toString('base64')
-
-    const req = new Request('http://localhost/nested')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(handlerExecuted).toBeFalsy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(await res.text()).toBe('Unauthorized')
-  })
-
-  it('Should authorize - verifyUser', async () => {
-    const credential = Buffer.from('dynamic-user' + ':' + 'acryl-password').toString('base64')
-
-    const req = new Request('http://localhost/verify-user')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(handlerExecuted).toBeTruthy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('verify-user')
-  })
-
-  it('Should not authorize - verifyUser', async () => {
-    const credential = Buffer.from('foo' + ':' + 'bar').toString('base64')
-
-    const req = new Request('http://localhost/verify-user')
-    req.headers.set('Authorization', `Basic ${credential}`)
-    const res = await app.request(req)
-    expect(handlerExecuted).toBeFalsy()
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(await res.text()).toBe('Unauthorized')
-  })
-
-  it('Should not authorize - custom invalid user message as string', async () => {
-    const req = new Request('http://localhost/auth-custom-invalid-user-message-string')
-    const res = await app.request(req)
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(handlerExecuted).toBeFalsy()
-    expect(await res.text()).toBe('Custom unauthorized message as string')
-  })
-
-  it('Should not authorize - custom invalid user message as object', async () => {
-    const req = new Request('http://localhost/auth-custom-invalid-user-message-object')
-    const res = await app.request(req)
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(res.headers.get('Content-Type')).toMatch('application/json')
-    expect(handlerExecuted).toBeFalsy()
-    expect(await res.text()).toBe('{"message":"Custom unauthorized message as object"}')
-  })
-
-  it('Should not authorize - custom invalid user message as function string', async () => {
-    const req = new Request('http://localhost/auth-custom-invalid-user-message-function-string')
-    const res = await app.request(req)
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(handlerExecuted).toBeFalsy()
-    expect(await res.text()).toBe('Custom unauthorized message as function string')
-  })
-
-  it('Should not authorize - custom invalid user message as function object', async () => {
-    const req = new Request('http://localhost/auth-custom-invalid-user-message-function-object')
-    const res = await app.request(req)
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(401)
-    expect(res.headers.get('Content-Type')).toMatch('application/json')
-    expect(handlerExecuted).toBeFalsy()
-    expect(await res.text()).toBe('{"message":"Custom unauthorized message as function object"}')
-  })
-})
-
-describe('Basic Auth with onAuthSuccess', () => {
-  const username = 'callback-user'
-  const password = 'callback-pass'
-
-  it('should call onAuthSuccess callback on successful auth', async () => {
-    type Env = { Variables: { custom: string } }
-    const app = new Acryl<Env>()
-    let callbackCalled = false
-    let callbackUsername = ''
-
-    app.use(
-      '/*',
-      basicAuth({
-        username,
-        password,
-        onAuthSuccess: (c, u) => {
-          callbackCalled = true
-          callbackUsername = u
-          c.set('custom', 'value')
-        },
-      })
-    )
-    app.get('/', (c) => c.text(c.get('custom') || 'no-custom'))
-
-    const credential = Buffer.from(`${username}:${password}`).toString('base64')
-    const res = await app.request('/', {
-      headers: { Authorization: `Basic ${credential}` },
-    })
-
-    expect(callbackCalled).toBe(true)
-    expect(callbackUsername).toBe(username)
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('value')
-  })
-
-  it('should support async onAuthSuccess callback', async () => {
-    type Env = { Variables: { asyncValue: string } }
-    const app = new Acryl<Env>()
-
-    app.use(
-      '/*',
-      basicAuth({
-        username,
-        password,
-        onAuthSuccess: async (c) => {
-          await new Promise((resolve) => setTimeout(resolve, 10))
-          c.set('asyncValue', 'done')
-        },
-      })
-    )
-    app.get('/', (c) => c.text(c.get('asyncValue') || 'not-done'))
-
-    const credential = Buffer.from(`${username}:${password}`).toString('base64')
-    const res = await app.request('/', {
-      headers: { Authorization: `Basic ${credential}` },
-    })
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('done')
-  })
-
-  it('should not call onAuthSuccess on failed auth', async () => {
-    const app = new Acryl()
-    let callbackCalled = false
-
-    app.use(
-      '/*',
-      basicAuth({
-        username,
-        password,
-        onAuthSuccess: () => {
-          callbackCalled = true
-        },
-      })
-    )
-    app.get('/', (c) => c.text('ok'))
-
-    const credential = Buffer.from('wrong:wrong').toString('base64')
-    const res = await app.request('/', {
-      headers: { Authorization: `Basic ${credential}` },
-    })
-
-    expect(callbackCalled).toBe(false)
-    expect(res.status).toBe(401)
-  })
-
-  it('should work with verifyUser mode', async () => {
-    type Env = { Variables: { verified: string } }
-    const app = new Acryl<Env>()
-    let callbackUsername = ''
-
-    app.use(
-      '/*',
-      basicAuth({
-        verifyUser: (u, p) => u === username && p === password,
-        onAuthSuccess: (c, u) => {
-          callbackUsername = u
-          c.set('verified', 'yes')
-        },
-      })
-    )
-    app.get('/', (c) => c.text(c.get('verified') || 'no'))
-
-    const credential = Buffer.from(`${username}:${password}`).toString('base64')
-    const res = await app.request('/', {
-      headers: { Authorization: `Basic ${credential}` },
-    })
-
-    expect(callbackUsername).toBe(username)
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('yes')
-  })
-})