authcontrol/access_key_test.go at 8dfbb61f9fceba7f70050690d62a50305beb91b9 · 0xsequence/authcontrol · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
package authcontrol_test

import (
	"context"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/0xsequence/authcontrol"
	"github.com/stretchr/testify/require"
)

func TestAccessKeyEncoding(t *testing.T) {
	t.Run("v0", func(t *testing.T) {
		ctx := authcontrol.WithVersion(context.Background(), 0)
		projectID := uint64(12345)
		accessKey, err := authcontrol.GenerateAccessKey(ctx, projectID)
		require.NoError(t, err)
		t.Log("=> k", accessKey)

		outID, err := accessKey.GetProjectID()
		require.NoError(t, err)
		require.Equal(t, projectID, outID)
	})

	t.Run("v1", func(t *testing.T) {
		ctx := authcontrol.WithVersion(context.Background(), 1)
		projectID := uint64(12345)
		accessKey, err := authcontrol.GenerateAccessKey(ctx, projectID)
		require.NoError(t, err)
		t.Log("=> k", accessKey)
		outID, err := accessKey.GetProjectID()
		require.NoError(t, err)
		require.Equal(t, projectID, outID)
	})
	t.Run("v2", func(t *testing.T) {
		ctx := authcontrol.WithVersion(context.Background(), 2)
		projectID := uint64(12345)
		accessKey, err := authcontrol.GenerateAccessKey(ctx, projectID)
		require.NoError(t, err)
		t.Log("=> k", accessKey, "| prefix =>", accessKey.GetPrefix())
		outID, err := accessKey.GetProjectID()
		require.NoError(t, err)
		require.Equal(t, projectID, outID)

		ctx = authcontrol.WithPrefix(ctx, "newprefix:dev")

		accessKey2, err := authcontrol.GenerateAccessKey(ctx, projectID)
		require.NoError(t, err)
		t.Log("=> k", accessKey2, "| prefix =>", accessKey2.GetPrefix())
		outID, err = accessKey2.GetProjectID()
		require.NoError(t, err)
		require.Equal(t, projectID, outID)
		// retrocompatibility with the older prefix
		outID, err = accessKey.GetProjectID()
		require.NoError(t, err)
		require.Equal(t, projectID, outID)
	})
}

func TestDecode(t *testing.T) {
	ctx := authcontrol.WithVersion(context.Background(), 2)
	accessKey, err := authcontrol.GenerateAccessKey(ctx, 237)
	require.NoError(t, err)
	t.Log("=> k", accessKey, "| prefix =>", accessKey.GetPrefix())
}

func TestForwardAccessKeyTransport(t *testing.T) {
	// Create a test server that captures the request headers
	var capturedHeaders http.Header
	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		capturedHeaders = r.Header.Clone()
		w.WriteHeader(http.StatusOK)
	}))
	defer server.Close()

	// Create context with access key
	accessKey := "test-access-key-123"
	ctx := authcontrol.WithAccessKey(context.Background(), authcontrol.AccessKey(accessKey))

	// Create HTTP client with ForwardAccessKeyTransport
	client := &http.Client{
		Transport: authcontrol.ForwardAccessKeyTransport(http.DefaultTransport),
	}

	// Create request with the context
	req, err := http.NewRequestWithContext(ctx, "GET", server.URL, nil)
	require.NoError(t, err)

	// Make the request
	resp, err := client.Do(req)
	require.NoError(t, err)
	defer resp.Body.Close()

	// Verify the access key header was set
	require.Equal(t, accessKey, capturedHeaders.Get(authcontrol.HeaderAccessKey))
}