83 lines
3 KiB
PHP
83 lines
3 KiB
PHP
<?php
|
||
|
||
namespace Tests\Feature;
|
||
|
||
use Mockery;
|
||
use Tests\TestCase;
|
||
use IndieAuth\Client;
|
||
use Illuminate\Http\JsonResponse;
|
||
|
||
class TokenEndpointTest extends TestCase
|
||
{
|
||
public function test_token_endpoint_issues_token()
|
||
{
|
||
$mockClient = Mockery::mock(Client::class);
|
||
$mockClient->shouldReceive('discoverAuthorizationEndpoint')
|
||
->with(normalize_url(config('app.url')))
|
||
->once()
|
||
->andReturn('https://indieauth.com/auth');
|
||
$mockClient->shouldReceive('verifyIndieAuthCode')
|
||
->andReturn([
|
||
'me' => config('app.url'),
|
||
'scope' => 'create update',
|
||
]);
|
||
$this->app->instance(Client::class, $mockClient);
|
||
$response = $this->post('/api/token', [
|
||
'me' => config('app.url'),
|
||
'code' => 'abc123',
|
||
'redirect_uri' => config('app.url') . '/indieauth-callback',
|
||
'client_id' => config('app.url') . '/micropub-client',
|
||
'state' => mt_rand(1000, 10000),
|
||
]);
|
||
$response->assertJson([
|
||
'me' => config('app.url'),
|
||
'scope' => 'create update',
|
||
]);
|
||
}
|
||
|
||
public function test_token_endpoint_returns_error_when_auth_endpoint_lacks_me_data()
|
||
{
|
||
$mockClient = Mockery::mock(Client::class);
|
||
$mockClient->shouldReceive('discoverAuthorizationEndpoint')
|
||
->with(normalize_url(config('app.url')))
|
||
->once()
|
||
->andReturn('https://indieauth.com/auth');
|
||
$mockClient->shouldReceive('verifyIndieAuthCode')
|
||
->andReturn([
|
||
'error' => 'error_message',
|
||
]);
|
||
$this->app->instance(Client::class, $mockClient);
|
||
$response = $this->post('/api/token', [
|
||
'me' => config('app.url'),
|
||
'code' => 'abc123',
|
||
'redirect_uri' => config('app.url') . '/indieauth-callback',
|
||
'client_id' => config('app.url') . '/micropub-client',
|
||
'state' => mt_rand(1000, 10000),
|
||
]);
|
||
$response->assertStatus(401);
|
||
$response->assertJson([
|
||
'error' => 'There was an error verifying the authorisation code.'
|
||
]);
|
||
}
|
||
|
||
public function test_token_endpoint_returns_error_when_no_auth_endpoint_found()
|
||
{
|
||
$mockClient = Mockery::mock(Client::class);
|
||
$mockClient->shouldReceive('discoverAuthorizationEndpoint')
|
||
->with(normalize_url(config('app.url')))
|
||
->once()
|
||
->andReturn(null);
|
||
$this->app->instance(Client::class, $mockClient);
|
||
$response = $this->post('/api/token', [
|
||
'me' => config('app.url'),
|
||
'code' => 'abc123',
|
||
'redirect_uri' => config('app.url') . '/indieauth-callback',
|
||
'client_id' => config('app.url') . '/micropub-client',
|
||
'state' => mt_rand(1000, 10000),
|
||
]);
|
||
$response->assertStatus(400);
|
||
$response->assertJson([
|
||
'error' => 'Can’t determine the authorisation endpoint.']
|
||
);
|
||
}
|
||
}
|