Xavier FranciscoandSteve Chávez
1cf54e6575
* Fix #880, Clean and consolidate error responses * Fix #1285, Abort on fatal errors * Add / Detail tests
31 lines
951 B
Haskell
31 lines
951 B
Haskell
module Feature.NoJwtSpec where
|
|
|
|
-- {{{ Imports
|
|
import Test.Hspec
|
|
import Test.Hspec.Wai
|
|
import Test.Hspec.Wai.JSON
|
|
import Network.HTTP.Types
|
|
|
|
import SpecHelper
|
|
import Network.Wai (Application)
|
|
|
|
import Protolude
|
|
-- }}}
|
|
|
|
spec :: SpecWith Application
|
|
spec = describe "server started without JWT secret" $ do
|
|
|
|
-- this test will stop working 9999999999s after the UNIX EPOCH
|
|
it "responds with error on attempted auth" $ do
|
|
let auth = authHeaderJWT "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjk5OTk5OTk5OTksInJvbGUiOiJwb3N0Z3Jlc3RfdGVzdF9hdXRob3IiLCJpZCI6Impkb2UifQ.Dpss-QoLYjec5OTsOaAc3FNVsSjA89wACoV-0ra3ClA"
|
|
request methodGet "/authors_only" [auth] ""
|
|
`shouldRespondWith`
|
|
[json|{"message":"Server lacks JWT secret"}|]
|
|
{ matchStatus = 500
|
|
, matchHeaders = [ matchContentTypeJson ]
|
|
}
|
|
|
|
it "behaves normally when user does not attempt auth" $
|
|
request methodGet "/items" [] ""
|
|
`shouldRespondWith` 200
|