microgateway-plugins/futures/oauth-test.js

const oauth = require('../oauth/index');
const oauthv2 = require('../oauthv2/index');
//
const assert = require('assert');
const denv = require('dotenv');
denv.config();


var oauthConfiigDefaults = {
  "authorization-header" : "authorization",
  "api-key-header" : 'x-api-key',
  "keep-authorization-header" : false,
  "cacheKey" : false,
  "gracePeriod" : 0,
  "allowOAuthOnly" : false,
  "allowAPIKeyOnly" : false,
  "productOnly" : false,
  "tokenCache" : false,
  "tokenCacheSize" : 100,
  "allowNoAuthorization" : false,
  "jwk_keys" : undefined,
  "request" : undefined
}


var default_onrequest_cb = (err) => {
    assert.ok(!(err instanceof Error));
    done();
};

var generic_req = {
  token: {
    application_name: '0e7762f4-ea67-4cc1-ae4a-21598c35b18f',
    api_product_list: ['EdgeMicroTestProduct']       
  }
}

var generic_res = {
  headers: {},
  setHeader: (key, val) => {
    res.headers[key] = val;
  }
}


// var generic_req_params = [generic_req, generic_res, default_onrequest_cb];



describe('oauth plugins', function() {
  var plugin = null;

  //this.timout(0)

  before(() => {
    //
    
  })
  
  beforeEach(() => {
    // environment variables....
    process.env.EDGEMICRO_LOCAL_PROXY = "0"
    process.env.EDGEMICRO_LOCAL = "0"
    process.env.EDGEMICRO_OPENTRACE = false
    //
  });


  after((done) => {
    if ( plugin ) plugin.shutdown();
    done();
  })

  // unit tests originally in oauth/test/oauth.test

  var config = {
    "verify_api_key_url":"https://sfeldmanmicro-test.apigee.net/edgemicro-auth/verifyApiKey",
    "product_to_proxy":{"EdgeMicroTestProduct":["edgemicro_weather"]},
    "product_to_api_resource":{"EdgeMicroTestProduct":["/hello/blah/*/foo*","/hello/some/**","/hello/blah"]}
  };
  var config2 = {
    "verify_api_key_url":"https://sfeldmanmicro-test.apigee.net/edgemicro-auth/verifyApiKey",
    "product_to_proxy":{"EdgeMicroTestProduct":["edgemicro_weather"]},
    "product_to_api_resource":{"EdgeMicroTestProduct":[]}
  };
  var config3 = {
    "verify_api_key_url":"https://sfeldmanmicro-test.apigee.net/edgemicro-auth/verifyApiKey",
    "product_to_proxy":{"EdgeMicroTestProduct":["edgemicro_weather"]},
    "product_to_api_resource":{"EdgeMicroTestProduct":["/blah/*/foo*","/some/**","blah"]}
  };
  
  var proxy = {name:'edgemicro_weather',base_path:'/hello'}
  var token = {api_product_list:['EdgeMicroTestProduct']}

  var auths = [oauth, oauthv2]

  auths.forEach(authMod => {


    var tests = authMod.tests;

    var authObj = null;

    it('initialize the base class without error',(done) => {
      if ( authMod == oauth ) {

        var logger = {};
        var stats = {};
        //
        authObj = tests.initTest('oauth',oauthConfiigDefaults, logger, stats)
      } else {
        var logger = {};
        var stats = {};
        //
        authObj = tests.initTest('oauthv2',oauthConfiigDefaults, logger, stats)
      }

      done();
    })

    it('will not initialize without a well formed config',(done) => {
      var checkObj = {
        'a' : 1,
        'b' : 2,
        'c' : 3,
        'd' : 4,
        'e' : 5,
        'f' : 6,
      }
      //
      var result = tests.test_objectWithoutProperties(checkObj,['a','c','e'])
      //
      assert(result['a'] === undefined)
      assert(result['b'] === 2)
      //
      result = tests.test_objectWithoutProperties(checkObj,['a','c','f'])
      //
      assert(result['d'] === 4)
      assert(result['f'] === undefined)

      done();
  });
    

    it('will not initialize without a well formed config',(done) => {
      var logger = {};
      var stats = {};

      var myplugin = authMod.init(undefined, logger, stats);
      assert(myplugin === undefined)

      myplugin = authMod.init(null, logger, stats);
      assert(myplugin === undefined)

      done();
    })
  
    it('exposes an onrequest handler', (done) => {
      var logger = {};
      var stats = {};
      //
      var pluginT = authMod.init(oauthConfiigDefaults, logger, stats);
      assert.ok(pluginT.onrequest);
      //
      done();
    });

    it('runs in local mode',(done) => {
      //
      process.env.EDGEMICRO_LOCAL = "1"
      var logger = {};
      var stats = {};

      var req = null;
      var res = null;

      var myplugin = authMod.init(oauthConfiigDefaults, logger, stats);
      myplugin.onrequest(req,res,()=>{
        process.env.EDGEMICRO_LOCAL = "0"
        assert(true)
        done();
      })

    })

    it('takes a default config and bad req and res',(done) => {
      // 
      var logger = {};
      var stats = {};
      var req = null;
      var res = null;
      //
      var cb_called = false;
      //
      var cb = () => {
        cb_called = true;
        assert(false)
        done();
      }
      //
      try {
        var pluginT = authMod.init(oauthConfiigDefaults, logger, stats);
        pluginT.onrequest(req,res,cb)
        if ( !cb_called ) {
          assert(true);
        }
        req = {}
        res = {}
        pluginT.onrequest(req,res,cb)
        if ( !cb_called ) {
          assert(true);
          done();
        }
      //
      } catch(e) {
        console.log(e);
        assert(false)
        done()
      }

    })

    it('req and res are empty and default config ', (done) => {
      // 
      var logger = {};
      var stats = {};
      //
      var req = {
        headers : {}
      };
      var res = {};
      //
      process.env.EDGEMICRO_LOCAL_PROXY = "1"
      //
      var cb_called = false;
      //
      var cb = () => {
        cb_called = true;
        assert(true)
        done();
      }
      //
      try {
        var pluginT = authMod.init(oauthConfiigDefaults, logger, stats);
        pluginT.onrequest(req,res,cb)
        if ( !cb_called ) {
          assert(false);
          done();
        }
      //
      } catch(e) {
        console.log(e);
        assert(false)
        done()
      }

    })


  
  })


  // should be identical for these tests
  var modules = { "oauth" : oauth, "oauthv2" : oauthv2 }
  for (var name in modules) {

    const logger = {}
    const stats = {}

    var tests = modules[name].tests;

    describe(name, function() {

      var package = modules[name]


      it('checkIfAuthorized',function (done) {

        var authObj = tests.initTest('oauth',config, logger, stats)
        
        var contains;
        contains = authObj.checkIfAuthorized('/hello',proxy,token);
        assert(!contains)
        contains = authObj.checkIfAuthorized('/hello/blah',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah/somerule/foosomething',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah/somerule/ifoosomething',proxy,token);
        assert(!contains)
        contains = authObj.checkIfAuthorized('/hello/some/somerule/foosomething',proxy,token);
        assert(contains)
        done()
      })

      it('checkIfAuthorizedNoConfig',function (done) {

        var authObj = tests.initTest('oauth',config2, logger, stats)

        var contains;
        contains = authObj.checkIfAuthorized('/hello',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah/somerule/foosomething',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah/somerule/ifoosomething',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/some/somerule/foosomething',proxy,token);
        assert(contains)
        done()
      })

      it('checkIfAuthorized3',function (done) {

        var authObj = tests.initTest('oauth',config3, logger, stats)

        var contains;
        contains = authObj.checkIfAuthorized('/hello',proxy,token);
        assert(!contains)
        contains = authObj.checkIfAuthorized('/hello/blah',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah/somerule/foosomething',proxy,token);
        assert(contains)
        contains = authObj.checkIfAuthorized('/hello/blah/somerule/ifoosomething',proxy,token);
        assert(!contains)
        contains = authObj.checkIfAuthorized('/hello/some/somerule/foosomething',proxy,token);
        assert(contains)
        done()

      })
      

      it('exposes an onrequest handler', function() {
          var config = {}
          var plugin = package.init.apply(null, [config, logger, stats]);
          assert.ok(plugin.onrequest);
        });
      
      it('ejectToken where gracePeriod == 0', function() {
          var config = {
              allowOAuthOnly: true,
              allowNoAuthorization: true,
              gracePeriod: 0,
          }
          
          var plugin = package.init.apply(null, [config, logger, stats])
          var cb = (err) => {}
          var req = {headers: {}}
          var res = {}
          plugin.onrequest.apply(null, [req, res, cb]); // called to init vars

          authObj = tests.initTest('oauth',config, logger, stats)
          // not expired
          var exp = (new Date().getTime() / 1000) + 5
          assert.ok(!authObj.ejectToken(exp), "should not eject")
      
          // expired
          var exp = new Date().getTime() / 1000 - 5
          assert.ok(authObj.ejectToken(exp), "should eject")
        });
      
      it('ejectToken where gracePeriod != 0', function() {
          var config = {
              allowOAuthOnly: true,
              allowNoAuthorization: true,
              gracePeriod: 5,
          }
          var plugin = package.init.apply(null, [config, logger, stats])
      
          var cb = (err) => {}
          var req = {headers: {}}
          var res = {}
          plugin.onrequest.apply(null, [req, res, cb]); // called to init vars
      
          authObj = tests.initTest('oauth',config, logger, stats)
          // not expired
          var exp = (new Date().getTime() / 1000) + 5
          assert.ok(!authObj.ejectToken(exp), "should not eject")
      
          // expired, inside of grace period
          var exp = new Date().getTime() / 1000 - 3
          assert.ok(!authObj.ejectToken(exp), "should not eject")
      
          // expired, outside of grace period
          var exp = new Date().getTime() / 1000 - 6
          assert.ok(authObj.ejectToken(exp), "should eject")
        });
    })
  }
});