Trey t
81578f6e27
Delegates all credential management (login, register, password reset, email verification, social sign-in) to Ory Kratos. The Go API now acts as a resource server: the new KratosAuth middleware validates sessions against the Kratos whoami endpoint, writes the local User mirror into Echo context, and all existing domain handlers continue working unchanged. Hand-rolled token auth, AuthToken model, apple_auth/ google_auth services, and the auth refresh flow are removed. Tests are updated to use the fake-token middleware pattern so existing integration assertions require no rewrite. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
116 lines
3.6 KiB
Go
116 lines
3.6 KiB
Go
// auth_handler_test.go tests the auth handler endpoints that survived the
|
|
// Ory Kratos migration: GET /me/ and PUT/PATCH /profile/.
|
|
// Login, register, logout, forgot-password, and social sign-in are now
|
|
// handled by Kratos.
|
|
package handlers
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/labstack/echo/v4"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/treytartt/honeydue-api/internal/config"
|
|
"github.com/treytartt/honeydue-api/internal/dto/requests"
|
|
"github.com/treytartt/honeydue-api/internal/repositories"
|
|
"github.com/treytartt/honeydue-api/internal/services"
|
|
"github.com/treytartt/honeydue-api/internal/testutil"
|
|
)
|
|
|
|
func setupAuthHandler(t *testing.T) (*AuthHandler, *echo.Echo, *repositories.UserRepository) {
|
|
db := testutil.SetupTestDB(t)
|
|
userRepo := repositories.NewUserRepository(db)
|
|
cfg := &config.Config{
|
|
Security: config.SecurityConfig{
|
|
SecretKey: "test-secret-key",
|
|
PasswordResetExpiry: 15 * time.Minute,
|
|
ConfirmationExpiry: 24 * time.Hour,
|
|
MaxPasswordResetRate: 3,
|
|
},
|
|
}
|
|
authService := services.NewAuthService(userRepo, cfg)
|
|
handler := NewAuthHandler(authService, nil, nil) // No email or cache for tests
|
|
e := testutil.SetupTestRouter()
|
|
return handler, e, userRepo
|
|
}
|
|
|
|
func TestAuthHandler_CurrentUser(t *testing.T) {
|
|
handler, e, _ := setupAuthHandler(t)
|
|
|
|
db := testutil.SetupTestDB(t)
|
|
user := testutil.CreateTestUser(t, db, "metest", "me@test.com", "")
|
|
user.FirstName = "Test"
|
|
user.LastName = "User"
|
|
// Use the userRepo from setupAuthHandler's DB, but since we need the user
|
|
// in the same DB we re-create it there.
|
|
db2 := testutil.SetupTestDB(t)
|
|
user2 := testutil.CreateTestUser(t, db2, "metest2", "me2@test.com", "")
|
|
user2.FirstName = "Test"
|
|
user2.LastName = "User"
|
|
userRepo2 := repositories.NewUserRepository(db2)
|
|
require.NoError(t, userRepo2.Update(user2))
|
|
|
|
// Build handler against db2
|
|
cfg := &config.Config{}
|
|
authService2 := services.NewAuthService(userRepo2, cfg)
|
|
handler2 := NewAuthHandler(authService2, nil, nil)
|
|
|
|
authGroup := e.Group("/api/auth")
|
|
authGroup.Use(testutil.MockAuthMiddleware(user2))
|
|
authGroup.GET("/me/", handler2.CurrentUser)
|
|
|
|
_ = handler // avoid unused
|
|
|
|
t.Run("get current user", func(t *testing.T) {
|
|
w := testutil.MakeRequest(e, "GET", "/api/auth/me/", nil, "test-token")
|
|
|
|
testutil.AssertStatusCode(t, w, http.StatusOK)
|
|
|
|
var response map[string]interface{}
|
|
err := json.Unmarshal(w.Body.Bytes(), &response)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "metest2", response["username"])
|
|
assert.Equal(t, "me2@test.com", response["email"])
|
|
})
|
|
}
|
|
|
|
func TestAuthHandler_UpdateProfile(t *testing.T) {
|
|
db := testutil.SetupTestDB(t)
|
|
userRepo := repositories.NewUserRepository(db)
|
|
cfg := &config.Config{}
|
|
authService := services.NewAuthService(userRepo, cfg)
|
|
handler := NewAuthHandler(authService, nil, nil)
|
|
e := testutil.SetupTestRouter()
|
|
|
|
user := testutil.CreateTestUser(t, db, "updatetest", "update@test.com", "")
|
|
|
|
authGroup := e.Group("/api/auth")
|
|
authGroup.Use(testutil.MockAuthMiddleware(user))
|
|
authGroup.PUT("/profile/", handler.UpdateProfile)
|
|
|
|
t.Run("update first and last name", func(t *testing.T) {
|
|
firstName := "Updated"
|
|
lastName := "Name"
|
|
req := requests.UpdateProfileRequest{
|
|
FirstName: &firstName,
|
|
LastName: &lastName,
|
|
}
|
|
|
|
w := testutil.MakeRequest(e, "PUT", "/api/auth/profile/", req, "test-token")
|
|
|
|
testutil.AssertStatusCode(t, w, http.StatusOK)
|
|
|
|
var response map[string]interface{}
|
|
err := json.Unmarshal(w.Body.Bytes(), &response)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "Updated", response["first_name"])
|
|
assert.Equal(t, "Name", response["last_name"])
|
|
})
|
|
}
|