Add token expiry tests

Author: mattjreynolds

tests/unit/metrics/api/django_cognito_jwt/test_validator.py

@@ -1,4 +1,5 @@
 import pytest
+from datetime import datetime, timedelta, timezone
 from utils import create_jwt_token
 
 from metrics.api.django_cognito_jwt import validator
@@ -31,6 +32,35 @@ def test_validate_token_error_key(cognito_well_known_keys, jwk_private_key_two):
         auth.validate(token)
 
 
+def test_validate_token_valid_expiry(cognito_well_known_keys, jwk_private_key_one):
+    token = create_jwt_token(
+        jwk_private_key_one,
+        {
+            "iss": "https://cognito-idp.eu-central-1.amazonaws.com/bla",
+            "aud": "my-audience",
+            "sub": "username",
+            "exp": datetime.now(tz=timezone.utc) + timedelta(minutes=15),
+        },
+    )
+    auth = validator.TokenValidator("eu-central-1", "bla", "my-audience")
+    auth.validate(token)
+
+
+def test_validate_token_error_expired(cognito_well_known_keys, jwk_private_key_one):
+    token = create_jwt_token(
+        jwk_private_key_one,
+        {
+            "iss": "https://cognito-idp.eu-central-1.amazonaws.com/bla",
+            "aud": "my-audience",
+            "sub": "username",
+            "exp": datetime.now(tz=timezone.utc) - timedelta(minutes=15),
+        },
+    )
+    auth = validator.TokenValidator("eu-central-1", "bla", "my-audience")
+    with pytest.raises(validator.TokenError):
+        auth.validate(token)
+
+
 def test_validate_token_error_aud(cognito_well_known_keys, jwk_private_key_one):
     token = create_jwt_token(
         jwk_private_key_one,