mirror of
https://github.com/labstack/echo.git
synced 2024-12-22 20:06:21 +02:00
59 lines
1.6 KiB
Go
59 lines
1.6 KiB
Go
package middleware
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
echo "gopkg.in/labstack/echo.v1"
|
|
)
|
|
|
|
func TestBasicAuth(t *testing.T) {
|
|
e := echo.New()
|
|
req, _ := http.NewRequest(echo.GET, "/", nil)
|
|
rec := httptest.NewRecorder()
|
|
c := echo.NewContext(req, echo.NewResponse(rec, e), e)
|
|
fn := func(u, p string) bool {
|
|
if u == "joe" && p == "secret" {
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
ba := BasicAuth(fn)
|
|
|
|
// Valid credentials
|
|
auth := Basic + " " + base64.StdEncoding.EncodeToString([]byte("joe:secret"))
|
|
req.Header.Set(echo.Authorization, auth)
|
|
assert.NoError(t, ba(c))
|
|
|
|
//---------------------
|
|
// Invalid credentials
|
|
//---------------------
|
|
|
|
// Incorrect password
|
|
auth = Basic + " " + base64.StdEncoding.EncodeToString([]byte("joe:password"))
|
|
req.Header.Set(echo.Authorization, auth)
|
|
he := ba(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusUnauthorized, he.Code())
|
|
assert.Equal(t, Basic+" realm=Restricted", rec.Header().Get(echo.WWWAuthenticate))
|
|
|
|
// Empty Authorization header
|
|
req.Header.Set(echo.Authorization, "")
|
|
he = ba(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusUnauthorized, he.Code())
|
|
assert.Equal(t, Basic+" realm=Restricted", rec.Header().Get(echo.WWWAuthenticate))
|
|
|
|
// Invalid Authorization header
|
|
auth = base64.StdEncoding.EncodeToString([]byte("invalid"))
|
|
req.Header.Set(echo.Authorization, auth)
|
|
he = ba(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusUnauthorized, he.Code())
|
|
assert.Equal(t, Basic+" realm=Restricted", rec.Header().Get(echo.WWWAuthenticate))
|
|
|
|
// WebSocket
|
|
c.Request().Header.Set(echo.Upgrade, echo.WebSocket)
|
|
assert.NoError(t, ba(c))
|
|
}
|