fix tokenUtils tests, skip if not configured

Author: mchangrh

ci.json

@@ -9,7 +9,7 @@
     "discordCompletelyIncorrectReportWebhookURL": "http://127.0.0.1:8081/webhook/CompletelyIncorrectReport",
     "discordNeuralBlockRejectWebhookURL": "http://127.0.0.1:8081/webhook/NeuralBlockReject",
     "neuralBlockURL": "http://127.0.0.1:8081/NeuralBlock",
-    "userCounterURL": "https://127.0.0.1:8081/UserCounter",
+    "userCounterURL": "http://127.0.0.1:8081/UserCounter",
     "behindProxy": true,
     "postgres": {
         "user": "ci_db_user",
@@ -71,5 +71,10 @@
           "statusCode": 200
         }
     },
+    "patreon": {
+        "clientId": "testClientID",
+        "clientSecret": "testClientSecret",
+        "redirectUri": "http://127.0.0.1/fake/callback"
+    },
     "minReputationToSubmitFiller": -1
 }

package-lock.json

@@ -39,8 +39,10 @@
     "@types/mocha": "^9.1.1",
     "@types/node": "^18.0.3",
     "@types/pg": "^8.6.5",
+    "@types/sinon": "^10.0.13",
     "@typescript-eslint/eslint-plugin": "^5.30.6",
     "@typescript-eslint/parser": "^5.30.6",
+    "axios-mock-adapter": "^1.21.2",
     "eslint": "^8.19.0",
     "mocha": "^10.0.0",
     "nodemon": "^2.0.19",

package.json

@@ -12,11 +12,19 @@ interface VerifyTokenRequest extends Request {
     }
 }
 
+export const validatelicenseKeyRegex = (token: string) =>
+    new RegExp(/[A-Za-z0-9]{40}/).test(token);
+
 export async function verifyTokenRequest(req: VerifyTokenRequest, res: Response): Promise<Response> {
     const { query: { licenseKey } } = req;
 
     if (!licenseKey) {
         return res.status(400).send("Invalid request");
+    } else if (!validatelicenseKeyRegex(licenseKey)) {
+        // fast check for invalid licence key
+        return res.status(200).send({
+            allowed: false
+        });
     }
     const licenseRegex = new RegExp(/[a-zA-Z0-9]{40}|[A-Z0-9-]{35}/);
     if (!licenseRegex.test(licenseKey)) {

src/routes/verifyToken.ts

@@ -59,5 +59,10 @@
           "statusCode": 200
         }
     },
+    "patreon": {
+        "clientId": "testClientID",
+        "clientSecret": "testClientSecret",
+        "redirectUri": "http://127.0.0.1/fake/callback"
+    },
     "minReputationToSubmitFiller": -1
 }

test.json

@@ -0,0 +1,68 @@
+import assert from "assert";
+import { config } from "../../src/config";
+import axios from "axios";
+import * as tokenUtils from "../../src/utils/tokenUtils";
+import MockAdapter from "axios-mock-adapter";
+import { validatelicenseKeyRegex } from "../../src/routes/verifyToken";
+let mock: MockAdapter;
+
+const validateToken = validatelicenseKeyRegex;
+const fakePatreonIdentity = {
+    data: {},
+    links: {},
+    included: [
+        {
+            attributes: {
+                is_monthly: true,
+                currently_entitled_amount_cents: 100,
+                patron_status: "active_patron",
+            },
+            id: "id",
+            type: "campaign"
+        }
+    ],
+};
+
+describe("tokenUtils test", function() {
+    before(function() {
+        mock = new MockAdapter(axios, { onNoMatch: "throwException" });
+        mock.onPost("https://www.patreon.com/api/oauth2/token").reply(200, {
+            access_token: "test_access_token",
+            refresh_token: "test_refresh_token",
+            expires_in: 3600,
+        });
+        mock.onGet(/identity/).reply(200, fakePatreonIdentity);
+    });
+
+    it("Should be able to create patreon token", function (done) {
+        if (!config?.patreon) this.skip();
+        tokenUtils.createAndSaveToken(tokenUtils.TokenType.patreon, "test_code").then((licenseKey) => {
+            assert.ok(validateToken(licenseKey));
+            done();
+        });
+    });
+    it("Should be able to create local token", (done) => {
+        tokenUtils.createAndSaveToken(tokenUtils.TokenType.local).then((licenseKey) => {
+            assert.ok(validateToken(licenseKey));
+            done();
+        });
+    });
+    it("Should be able to get patreon identity", function (done) {
+        if (!config?.patreon) this.skip();
+        tokenUtils.getPatreonIdentity("fake_access_token").then((result) => {
+            assert.deepEqual(result, fakePatreonIdentity);
+            done();
+        });
+    });
+    it("Should be able to refresh token", function (done) {
+        if (!config?.patreon) this.skip();
+        tokenUtils.refreshToken(tokenUtils.TokenType.patreon, "fake-licence-Key", "fake_refresh_token").then((result) => {
+            assert.strictEqual(result, true);
+            done();
+        });
+    });
+
+    after(function () {
+        mock.restore();
+    });
+});