Add more tests for origins without auth cookie

Author: kjetilk

test/integration/authentication-oidc-test.js

@@ -209,6 +209,37 @@ describe('Authentication API (OIDC)', () => {
             expect(response).to.have.property('status', 200)
           })
         })
+
+        describe('without that cookie but with a matching origin', () => {
+          let response
+          before(done => {
+            alice.get('/')
+              .set('Origin', aliceServerUri)
+              .end((err, res) => {
+                response = res
+                done(err)
+              })
+          })
+
+          it('should return a 401', () => {
+            expect(response).to.have.property('status', 401)
+          })
+        })
+        describe('without that cookie and a matching origin', () => {
+          let response
+          before(done => {
+            alice.get('/')
+              .set('Origin', bobServerUri)
+              .end((err, res) => {
+                response = res
+                done(err)
+              })
+          })
+
+          it('should return a 401', () => {
+            expect(response).to.have.property('status', 401)
+          })
+        })
       })
     })