| 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
 | defmodule Pleroma.Web.OAuth.AuthorizationTest do
  use Pleroma.DataCase
  alias Pleroma.Web.OAuth.{Authorization, App}
  import Pleroma.Factory
  test "create an authorization token for a valid app" do
    {:ok, app} =
      Repo.insert(
        App.register_changeset(%App{}, %{
          client_name: "client",
          scopes: "scope",
          redirect_uris: "url"
        })
      )
    user = insert(:user)
    {:ok, auth} = Authorization.create_authorization(app, user)
    assert auth.user_id == user.id
    assert auth.app_id == app.id
    assert String.length(auth.token) > 10
    assert auth.used == false
  end
  test "use up a token" do
    {:ok, app} =
      Repo.insert(
        App.register_changeset(%App{}, %{
          client_name: "client",
          scopes: "scope",
          redirect_uris: "url"
        })
      )
    user = insert(:user)
    {:ok, auth} = Authorization.create_authorization(app, user)
    {:ok, auth} = Authorization.use_token(auth)
    assert auth.used == true
    assert {:error, "already used"} == Authorization.use_token(auth)
    expired_auth = %Authorization{
      user_id: user.id,
      app_id: app.id,
      valid_until: NaiveDateTime.add(NaiveDateTime.utc_now(), -10),
      token: "mytoken",
      used: false
    }
    {:ok, expired_auth} = Repo.insert(expired_auth)
    assert {:error, "token expired"} == Authorization.use_token(expired_auth)
  end
  test "delete authorizations" do
    {:ok, app} =
      Repo.insert(
        App.register_changeset(%App{}, %{
          client_name: "client",
          scopes: "scope",
          redirect_uris: "url"
        })
      )
    user = insert(:user)
    {:ok, auth} = Authorization.create_authorization(app, user)
    {:ok, auth} = Authorization.use_token(auth)
    {auths, _} = Authorization.delete_user_authorizations(user)
    {_, invalid} = Authorization.use_token(auth)
    assert auth != invalid
  end
end
 |