Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SDK-1712] Test token set #108

Merged
merged 5 commits into from
Jul 9, 2020
Merged

[SDK-1712] Test token set #108

merged 5 commits into from
Jul 9, 2020

Conversation

adamjmcgrath
Copy link
Contributor

@adamjmcgrath adamjmcgrath commented Jul 1, 2020 •
edited
Loading

Description

Add some tests for the new token properties

Refactored the existing callback tests a little

References

https://github.com/auth0/express-openid-connect/blob/beta-2/API.md#request

Testing

  • This change adds test coverage for new/changed/fixed functionality

Checklist

  • I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used, if not master

@adamjmcgrath adamjmcgrath added the review:medium Medium review label Jul 1, 2020
@adamjmcgrath adamjmcgrath requested a review from a team July 1, 2020 09:44
@adamjmcgrath adamjmcgrath changed the title Test token set [SDK-1712] Test token set Jul 1, 2020
adamjmcgrath
adamjmcgrath commented Jul 1, 2020
View reviewed changes
test/fixture/server.js
if (protect) {
app.get('/protected', protect, (req, res) => {
res.json(req.oidc.tokens);
res.json({});
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

req.oidc.tokens prop doesn't exist, the tests just check the status code

adamjmcgrath
adamjmcgrath commented Jul 1, 2020
View reviewed changes
test/callback.tests.js
@@ -0,0 +1,327 @@
const assert = require('chai').assert;
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These tests are pretty much the same as test/callback_route_form_post.tests.js I just changed the name and reformatted them a little so they're a little more conventional (so I can run them from my IDE)

And added the last 2 tests

@adamjmcgrath adamjmcgrath requested a review from panva July 7, 2020 06:49
panva
panva suggested changes Jul 7, 2020
View reviewed changes
test/callback.tests.js
assert.equal(tokens.isAuthenticated, true);
assert.equal(tokens.idToken, idToken);
assert.equal(tokens.refreshToken, '__test_refresh_token__');
assert.include(tokens.accessToken, {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we ought to test also that

  • tokens.accessToken.expires_in being a number (its required to be returned by all access token responses) that counts down every second
  • tokens.accessToken.isExpired returns true/false

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

0c6814b

@adamjmcgrath adamjmcgrath requested a review from panva July 7, 2020 14:19
@adamjmcgrath adamjmcgrath merged commit 4e0aa22 into beta-2 Jul 9, 2020
@adamjmcgrath adamjmcgrath deleted the test-token-set branch July 9, 2020 14:53
adamjmcgrath added a commit that referenced this pull request Sep 17, 2020
@adamjmcgrath @panva @davidpatrick
Release v2 (#137)
0def341 
* Update beta version

* Initial commit of Beta 2 branch

Co-authored-by: Filip Skokan <[email protected]>

* Add PKCE tests and fix multiple servers in tests (#110)

* [SDK-1714] [SDK-1723] Session cookie checks (#111)

* Refactor the tests a little to use a server
* simplify test
* tests for unordered cookie chunks
* Test format changes for transient handler
* Update lib/transientHandler.js

Co-authored-by: Filip Skokan <[email protected]>

* [SDK-1715] Configuration and API updates (#109)

* Simplify the config tests, test more with less code
* Validate config fixes and tests
* Add comment, update tests
* `Issuer.discover` only takes a fully qualified url
* Simpler scope assertion and keep all config tests in same file
* Let auth server set default for response_type: code
* clientSecret is required for HS* algs regardless of response_type

Co-authored-by: Filip Skokan <[email protected]>

* [SDK-1712] Test token set (#108)

* Add tests for TokenSet
* Refactor the tests a little
* Split up code flow tests
* Add tests for access token expiry

* Add Prettier for style formatting (#112)

* Add prettier

* Run `prettier --write .`

* [SDK-1716] Add tests for claim* MW (#113)

* Add tests for claim* MW

* Fix tests

* Add some tests for session duration behaviour

* Revert "Add some tests for session duration behaviour"

This reverts commit e3ce510.

* Add some tests for session duration behaviour (#114)

* Add test for passing custom param to logout (#115)

* [SDK-1721] Auto generated docs (#117)

* Auto generated docs with typedoc

* fix lgtm

* Fix auth params

* Fix incorrect import of `requiresAuth` (#118)

* Add TROUBLESHOOTING and update debug logging (#120)

* Add TROUBLESHOOTING and update debug logging

* fix tests

* Update lib/context.js

Co-authored-by: Filip Skokan <[email protected]>

Co-authored-by: Filip Skokan <[email protected]>

* attemptSilentLogin feature (#121)

* attemptSilentLogin feature

* Resume silent login after successful login so that users try silent login again after their session's expire

* `postLogoutRedirectUri` isn't always a URI and login needs a check for `response_type` (#123)

* [SDK-1877] Add refresh method to access token (#124)

* Add refresh method to access token

* Add method to fetch userinfo

* Add refresh example to docs

* Not all refresh token grants get a new refresh token back (eg non rotating) and remove unneeded opts

* Scope all cookies (skipSilentLogin, transient and appSession) to the app session cookie path and domain config (if specified) (#125)

* [SDK-1722] Architecture (#128)

* Default Login flow docs

* Add logout

* add link from readme

* [SDK-1876] [SDK-1726] Add samples and smoke tests (#127)

* Add samples and smoke tests

* Fix CI

* Make the test clearer that discovery alg is ignored (#130)

* Make the test clearer that discovery alg is ignored

* Add test to show "none" disallowed for idTokenSigningAlg

* Disallow "none" in any case (#131)

* Disallow "none" in any case

* Fix puppeteer in CircleCI https://github.com/puppeteer/puppeteer/blob/main/docs/troubleshooting.md#running-puppeteer-on-circleci

* Revert "Fix puppeteer in CircleCI https://github.com/puppeteer/puppeteer/blob/main/docs/troubleshooting.md#running-puppeteer-on-circleci"

This reverts commit c0fd31e

* use active lts

* [SDK-1914] Add a migration guide for v1 to v2 (#129)

* Add a migration guide for v1 to v2

* Apply suggestions from code review

Co-authored-by: Filip Skokan <[email protected]>

* Updates per PR comments

Co-authored-by: Filip Skokan <[email protected]>

* Release 2.0.0-beta.0 (#132)

* Release 2.0.0-beta.0

* Ignore docs from lint

* Fixes the numbering on examples (#136)

* chore: update jose and openid-client (#134)

Co-authored-by: Filip Skokan <[email protected]>
Co-authored-by: David Patrick <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@panva panva panva approved these changes

Assignees
No one assigned
Labels
review:medium Medium review
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@adamjmcgrath @panva