github-auth-hook.test.js

'use strict';

const { test } = require('ava');
const express = require('express');
const request = require('supertest');
let app;
let enableGitHubOAuth;

test.beforeEach(() => {
    process.env.GITHUB_CLIENT_ID = '123';
    process.env.GITHUB_CLIENT_SECRET = 'secret';
    process.env.GITHUB_CALLBACK_URL = 'http://call.me.back';
    app = express();
    enableGitHubOAuth = require('./github-auth-hook');
    enableGitHubOAuth(app);
});

test('should return 401 for the first call to /api/admin API', async t => {
    t.plan(1);

    return request(app)
        .get(`/api/admin`)
        .expect(401)
        .expect(res => {
            t.true(
                res.body.message.indexOf(
                    'You have to identify yourself in order to use Unleash.'
                ) >= 0
            );
        });
});

test('should redirect to GH login page', async t => {
    t.plan(3);

    return request(app)
        .get(`/api/admin/login`)
        .expect(302)
        .expect(res => {
            t.true(res.header.location.indexOf('code') >= 0);
            t.true(res.header.location.indexOf('scope=read') >= 0);
            t.true(res.header.location.indexOf('client_id') >= 0);
        });
});

test('should go back to callback', async t => {
    t.plan(3);

    return request(app)
        .get(`/api/auth/callback`)
        .expect(302)
        .expect(res => {
            t.true(res.header.location.indexOf('code') >= 0);
            t.true(res.header.location.indexOf('scope=read') >= 0);
            t.true(res.header.location.indexOf('client_id') >= 0);
        });
});