add tests for hapi auth modes

Author: Max Marttinen

test/_helpers.js

@@ -184,6 +184,32 @@ function registerRoutes (server) {
           }
         }
       }
+    },
+    {
+      method: 'GET',
+      path: '/mode-optional',
+      options: {
+        auth: { strategy: 'keycloak-jwt', mode: 'optional' },
+        handler (req) {
+          return {
+            headers: req.headers,
+            query: req.query
+          }
+        }
+      }
+    },
+    {
+      method: 'GET',
+      path: '/mode-try',
+      options: {
+        auth: { strategy: 'keycloak-jwt', mode: 'try' },
+        handler (req) {
+          return {
+            headers: req.headers,
+            query: req.query
+          }
+        }
+      }
     }
   ])
 }

test/index.hapi-modes.spec.js

@@ -0,0 +1,53 @@
+const nock = require('nock')
+const test = require('ava')
+const helpers = require('./_helpers')
+const fixtures = require('./fixtures')
+
+const cfg = helpers.getOptions({ secret: fixtures.common.secret })
+
+test.afterEach.always('reset instances and prototypes', () => {
+  nock.cleanAll()
+})
+
+test('server method – authentication supports mode: "optional" - will succeed without auth', async (t) => {
+  const server = await helpers.getServer(cfg)
+
+  const res = await server.inject({
+    method: 'GET',
+    url: '/mode-optional',
+  })
+
+  t.truthy(res)
+  t.is(res.statusCode, 200)
+})
+
+test('server method – authentication supports mode: "optional" - will fail with invalid auth', async (t) => {
+  const server = await helpers.getServer(cfg)
+
+  const res = await server.inject({
+    method: 'GET',
+    url: '/mode-optional',
+    headers: {
+      authorization: `bearer invalid-token`
+    }
+  })
+
+  t.truthy(res)
+  t.is(res.statusCode, 401)
+  t.is(err.output.headers['WWW-Authenticate'], 'Bearer strategy="keycloak-jwt", error="Invalid credentials"')
+})
+
+test('server method – authentication supports mode: "try" - will succeed with invalid auth', async (t) => {
+  const server = await helpers.getServer(cfg)
+
+  const res = await server.inject({
+    method: 'GET',
+    url: '/mode-try',
+    headers: {
+      authorization: `bearer ${fixtures.composeJwt('expired')}`
+    }
+  })
+
+  t.truthy(res)
+  t.is(res.statusCode, 200)
+})