mirror of
https://github.com/labstack/echo.git
synced 2024-12-22 20:06:21 +02:00
94 lines
2.6 KiB
Go
94 lines
2.6 KiB
Go
// SPDX-License-Identifier: MIT
|
|
// SPDX-FileCopyrightText: © 2015 LabStack LLC and Echo contributors
|
|
|
|
package middleware
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/labstack/echo/v4"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestBasicAuth(t *testing.T) {
|
|
e := echo.New()
|
|
req := httptest.NewRequest(http.MethodGet, "/", nil)
|
|
res := httptest.NewRecorder()
|
|
c := e.NewContext(req, res)
|
|
f := func(u, p string, c echo.Context) (bool, error) {
|
|
if u == "joe" && p == "secret" {
|
|
return true, nil
|
|
}
|
|
return false, nil
|
|
}
|
|
h := BasicAuth(f)(func(c echo.Context) error {
|
|
return c.String(http.StatusOK, "test")
|
|
})
|
|
|
|
// Valid credentials
|
|
auth := basic + " " + base64.StdEncoding.EncodeToString([]byte("joe:secret"))
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
assert.NoError(t, h(c))
|
|
|
|
h = BasicAuthWithConfig(BasicAuthConfig{
|
|
Validator: f,
|
|
Realm: "someRealm",
|
|
})(func(c echo.Context) error {
|
|
return c.String(http.StatusOK, "test")
|
|
})
|
|
|
|
// Valid credentials
|
|
auth = basic + " " + base64.StdEncoding.EncodeToString([]byte("joe:secret"))
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
assert.NoError(t, h(c))
|
|
|
|
// Case-insensitive header scheme
|
|
auth = strings.ToUpper(basic) + " " + base64.StdEncoding.EncodeToString([]byte("joe:secret"))
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
assert.NoError(t, h(c))
|
|
|
|
// Invalid credentials
|
|
auth = basic + " " + base64.StdEncoding.EncodeToString([]byte("joe:invalid-password"))
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
he := h(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusUnauthorized, he.Code)
|
|
assert.Equal(t, basic+` realm="someRealm"`, res.Header().Get(echo.HeaderWWWAuthenticate))
|
|
|
|
// Invalid base64 string
|
|
auth = basic + " invalidString"
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
he = h(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusBadRequest, he.Code)
|
|
|
|
// Missing Authorization header
|
|
req.Header.Del(echo.HeaderAuthorization)
|
|
he = h(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusUnauthorized, he.Code)
|
|
|
|
// Invalid Authorization header
|
|
auth = base64.StdEncoding.EncodeToString([]byte("invalid"))
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
he = h(c).(*echo.HTTPError)
|
|
assert.Equal(t, http.StatusUnauthorized, he.Code)
|
|
|
|
h = BasicAuthWithConfig(BasicAuthConfig{
|
|
Validator: f,
|
|
Realm: "someRealm",
|
|
Skipper: func(c echo.Context) bool {
|
|
return true
|
|
},
|
|
})(func(c echo.Context) error {
|
|
return c.String(http.StatusOK, "test")
|
|
})
|
|
|
|
// Skipped Request
|
|
auth = basic + " " + base64.StdEncoding.EncodeToString([]byte("joe:skip"))
|
|
req.Header.Set(echo.HeaderAuthorization, auth)
|
|
assert.NoError(t, h(c))
|
|
|
|
}
|