40 lines
996 B
JavaScript
40 lines
996 B
JavaScript
const AuthAPI = require("../AuthAPI");
|
|
|
|
describe("Auth API", () => {
|
|
beforeEach(done => {
|
|
AuthAPI.removeAllRevokedTokens().then(() => done(), done);
|
|
});
|
|
|
|
it("creates tokens with the right scopes", done => {
|
|
const scopes = {
|
|
blacklist: {
|
|
add: true,
|
|
remove: true
|
|
}
|
|
};
|
|
|
|
AuthAPI.createToken(scopes).then(token => {
|
|
AuthAPI.verifyToken(token).then(payload => {
|
|
expect(payload.jti).toEqual(expect.any(String));
|
|
expect(payload.iss).toEqual(expect.any(String));
|
|
expect(payload.iat).toEqual(expect.any(Number));
|
|
expect(payload.scopes).toMatchObject(scopes);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it("refuses to verify revoked tokens", done => {
|
|
const scopes = {};
|
|
|
|
AuthAPI.createToken(scopes).then(token => {
|
|
AuthAPI.revokeToken(token).then(() => {
|
|
AuthAPI.verifyToken(token).then(payload => {
|
|
expect(payload).toBe(null);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
});
|