shlink/module/Rest/test-api/Middleware/AuthenticationTest.php

59 lines
2 KiB
PHP
Raw Normal View History

2019-01-26 12:19:20 +03:00
<?php
declare(strict_types=1);
namespace ShlinkioApiTest\Shlink\Rest\Middleware;
use GuzzleHttp\Exception\ClientException;
2019-01-27 12:54:04 +03:00
use Shlinkio\Shlink\Rest\Authentication\Plugin\ApiKeyHeaderPlugin;
use Shlinkio\Shlink\Rest\Authentication\RequestToHttpAuthPlugin;
use Shlinkio\Shlink\Rest\Util\RestUtils;
2019-01-26 12:19:20 +03:00
use ShlinkioTest\Shlink\Common\ApiTest\ApiTestCase;
2019-01-27 12:54:04 +03:00
use function implode;
use function Shlinkio\Shlink\Common\json_decode;
use function sprintf;
2019-01-26 12:19:20 +03:00
class AuthenticationTest extends ApiTestCase
{
/**
* @test
*/
2019-01-27 12:54:04 +03:00
public function authorizationErrorIsReturnedIfNoApiKeyIsSent()
2019-01-26 12:19:20 +03:00
{
2019-01-27 12:54:04 +03:00
try {
$this->callApi(self::METHOD_GET, '/short-codes');
} catch (ClientException $e) {
['error' => $error, 'message' => $message] = json_decode((string) $e->getResponse()->getBody());
2019-01-26 12:19:20 +03:00
2019-01-27 12:54:04 +03:00
$this->assertEquals(self::STATUS_UNAUTHORIZED, $e->getCode());
$this->assertEquals(RestUtils::INVALID_AUTHORIZATION_ERROR, $error);
$this->assertEquals(
sprintf(
'Expected one of the following authentication headers, but none were provided, ["%s"]',
implode('", "', RequestToHttpAuthPlugin::SUPPORTED_AUTH_HEADERS)
),
$message
);
}
}
/**
* @test
*/
public function apiKeyErrorIsReturnedWhenProvidedApiKeyIsInvalid()
{
try {
$this->callApi(self::METHOD_GET, '/short-codes', [
'headers' => [
ApiKeyHeaderPlugin::HEADER_NAME => 'invalid',
],
]);
} catch (ClientException $e) {
['error' => $error, 'message' => $message] = json_decode((string) $e->getResponse()->getBody());
$this->assertEquals(self::STATUS_UNAUTHORIZED, $e->getCode());
$this->assertEquals(RestUtils::INVALID_API_KEY_ERROR, $error);
$this->assertEquals('Provided API key does not exist or is invalid.', $message);
}
2019-01-26 12:19:20 +03:00
}
}