authelia/test/unitary/test_server.js

var server = require('../../src/lib/server');
var Jwt = require('../../src/lib/jwt');

var request = require('request');
var assert = require('assert');
var speakeasy = require('speakeasy');
var sinon = require('sinon');
var Promise = require('bluebird');

var request = Promise.promisifyAll(request);

var BASE_URL = 'http://localhost:8090';

describe('test the server', function() {
  var jwt = new Jwt('jwt_secret');
  var ldap_client = {
    bind: sinon.stub()
  };

  before(function() {
    var config = {
      port: 8090,
      totp_secret: 'totp_secret',
      ldap_url: 'ldap://127.0.0.1:389',
      ldap_users_dn: 'ou=users,dc=example,dc=com',
      jwt_secret: 'jwt_secret',
      jwt_expiration_time: '1h'
    };

    // ldap_client.bind.yields(undefined);
    ldap_client.bind.withArgs('cn=test_ok,ou=users,dc=example,dc=com', 
                              'password').yields(undefined);
    ldap_client.bind.withArgs('cn=test_nok,ou=users,dc=example,dc=com', 
                              'password').yields('error');
    server.run(config, ldap_client);
  });


  describe('test GET /login', function() {
    test_login()
  });

  describe('test GET /logout', function() {
    test_logout()
  });

  describe('test GET /_auth', function() {
    test_get_auth(jwt);
  });
 
  describe('test POST /_auth/1stfactor', function() {
    test_post_auth_1st_factor();
  });
});

function test_login() {
  it('should serve the login page', function(done) {
    request.get(BASE_URL + '/login')
    .on('response', function(response) {
      assert.equal(response.statusCode, 200);
      done();
    }) 
  });
}

function test_logout() {
  it('should logout and redirect to /', function(done) {
    request.get(BASE_URL + '/logout')
    .on('response', function(response) {
      assert.equal(response.req.path, '/');
      done();
    }) 
  });
}

function test_get_auth(jwt) {
  it('should return status code 401 when user is not authenticated', function(done) {
    request.get(BASE_URL + '/_auth')
    .on('response', function(response) {
      assert.equal(response.statusCode, 401);
      done();
    }) 
  });

  it('should return status code 204 when user is authenticated', function(done) {
    var j = request.jar();
    var r = request.defaults({jar: j});
    var token = jwt.sign({ user: 'test' }, '1h');
    var cookie = r.cookie('access_token=' + token);
    j.setCookie(cookie, BASE_URL + '/_auth');

    r.get(BASE_URL + '/_auth')
    .on('response', function(response) {
      assert.equal(response.statusCode, 204);
      done();
    }) 
  });
}

function test_post_auth_1st_factor() {
  it('should return status code 204 when ldap bind is successful', function() {
    request.postAsync(BASE_URL + '/_auth/1stfactor', {
      form: {
        username: 'username',
        password: 'password'
      }
    })
    .then(function(response) {
      assert.equal(response.statusCode, 204);
      return Promise.resolve();
    });
  });
}
// function test_post_auth_totp() {
//   it('should return the JWT token when authentication is successful', function(done) {
//     var clock = sinon.useFakeTimers();
//     var real_token = speakeasy.totp({
//       secret: 'totp_secret',
//       encoding: 'base32'
//     });
//     var expectedJwt = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoidGVzdF9vayIsImlhdCI6MCwiZXhwIjozNjAwfQ.ihvaljGjO5h3iSO_h3PkNNSCYeePyB8Hr5lfVZZYyrQ';
// 
//     request.post(BASE_URL + '/_auth/totp', { 
//       form: {
//         username: 'test_ok',
//         password: 'password',
//         token: real_token
//       }
//     }, 
//     function (error, response, body) {
//       if (!error && response.statusCode == 200) {
//         assert.equal(body, expectedJwt);
//         clock.restore();
//         done();
//       }
//     });
//   });
// 
//   it('should return invalid authentication status code', function(done) {
//     var clock = sinon.useFakeTimers();
//     var real_token = speakeasy.totp({
//       secret: 'totp_secret',
//       encoding: 'base32'
//     });
//     var data = {
//       form: {
//         username: 'test_nok',
//         password: 'password',
//         token: real_token
//       }
//     }
// 
//     request.post(BASE_URL + '/_auth/totp', data, function (error, response, body) {
//       if(response.statusCode == 401) {
//         clock.restore();
//         done();
//       }
//     });
//   });
// }