40 lines
976 B
JavaScript
40 lines
976 B
JavaScript
const AuthAPI = require("../AuthAPI")
|
|
|
|
describe("Auth API", () => {
|
|
beforeEach(done => {
|
|
AuthAPI.removeAllRevokedTokens().then(() => done(), done)
|
|
})
|
|
|
|
it("creates tokens with the right scopes", done => {
|
|
const scopes = {
|
|
blacklist: {
|
|
add: true,
|
|
remove: true
|
|
}
|
|
}
|
|
|
|
AuthAPI.createToken(scopes).then(token => {
|
|
AuthAPI.verifyToken(token).then(payload => {
|
|
expect(payload.jti).toEqual(expect.any(String))
|
|
expect(payload.iss).toEqual(expect.any(String))
|
|
expect(payload.iat).toEqual(expect.any(Number))
|
|
expect(payload.scopes).toMatchObject(scopes)
|
|
done()
|
|
})
|
|
})
|
|
})
|
|
|
|
it("refuses to verify revoked tokens", done => {
|
|
const scopes = {}
|
|
|
|
AuthAPI.createToken(scopes).then(token => {
|
|
AuthAPI.revokeToken(token).then(() => {
|
|
AuthAPI.verifyToken(token).then(payload => {
|
|
expect(payload).toBe(null)
|
|
done()
|
|
})
|
|
})
|
|
})
|
|
})
|
|
})
|