Add auth and blacklist APIs

server/__tests__/AuthAPI-test.js

@@ -0,0 +1,39 @@
+const AuthAPI = require('../AuthAPI')
+
+describe('Auth API', () => {
+  beforeEach(done => {
+    AuthAPI.removeAllRevokedTokens().then(() => done(), done)
+  })
+
+  it('creates tokens with the right scopes', done => {
+    const scopes = {
+      blacklist: {
+        add: true,
+        remove: true
+      }
+    }
+
+    AuthAPI.createToken(scopes).then(token => {
+      AuthAPI.verifyToken(token).then(payload => {
+        expect(payload.jti).toEqual(expect.any(String))
+        expect(payload.iss).toEqual(expect.any(String))
+        expect(payload.iat).toEqual(expect.any(Number))
+        expect(payload.scopes).toMatchObject(scopes)
+        done()
+      })
+    })
+  })
+
+  it('refuses to verify revoked tokens', done => {
+    const scopes = {}
+
+    AuthAPI.createToken(scopes).then(token => {
+      AuthAPI.revokeToken(token).then(() => {
+        AuthAPI.verifyToken(token).then(payload => {
+          expect(payload).toBe(null)
+          done()
+        })
+      })
+    })
+  })
+})