view release on metacpan or  search on metacpan

t/auth.t  view on Meta::CPAN

});
my $t5b = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;

$client->role_get($test_role, sub {
    my ($resp, $err) = @_;
    ok(!$err, 'role_get after revoke succeeded');
    my $perm_count = $resp->{perm} ? scalar(@{$resp->{perm}}) : 0;
    ok($perm_count == 0, 'role has no permissions after revoke');
    diag("Role has $perm_count permission(s) after revoke");
    EV::break;
});
my $t5c = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;

$client->user_add($test_user, 'test-password-123', sub {
    my ($resp, $err) = @_;
    ok(!$err, 'user_add succeeded');
    ok($resp->{header}, 'user_add response has header');
    diag("Created user: $test_user");
    EV::break;
});
my $t6 = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;

# authenticate errors while auth is disabled and returns a token once enabled
{
    my $auth_result;
    my $auth_err;
    $client->authenticate($test_user, 'test-password-123', sub {
        my ($resp, $err) = @_;
        $auth_result = $resp;
        $auth_err = $err;
        EV::break;
    });
    my $t_auth = EV::timer(5, 0, sub { fail('timeout'); EV::break });
    EV::run;

    if ($auth_err) {
        like($auth_err->{message} // $auth_err, qr/auth|not enabled|UNAUTHENTICATED/i,
            'authenticate returns expected error when auth disabled');
        pass('authenticate error handling works');
        diag("authenticate() error (expected when auth disabled): " . ($auth_err->{message} // $auth_err));
    } else {
        ok($auth_result, 'authenticate succeeded');
        ok(defined $auth_result->{token}, 'authenticate response has token');
        diag("authenticate() returned token (auth is enabled)");
    }
}

{
    my $wrong_err;
    $client->authenticate($test_user, 'wrong-password', sub {
        my ($resp, $err) = @_;
        $wrong_err = $err;
        EV::break;
    });
    my $t_wrong = EV::timer(5, 0, sub { fail('timeout'); EV::break });
    EV::run;

    # Auth not enabled or invalid credentials: an error either way
    ok($wrong_err, 'authenticate with wrong password returns error');
    diag("Wrong password error: " . ($wrong_err->{message} // $wrong_err));
}

{
    my $change_result;
    my $change_err;
    $client->user_change_password($test_user, 'new-password-456', sub {
        my ($resp, $err) = @_;
        $change_result = $resp;
        $change_err = $err;
        EV::break;
    });
    my $t_change = EV::timer(5, 0, sub { fail('timeout'); EV::break });
    EV::run;

    ok(!$change_err, 'user_change_password succeeded');
    ok($change_result && $change_result->{header}, 'user_change_password response has header');
    diag("Changed password for user: $test_user");
}

$client->user_list(sub {
    my ($resp, $err) = @_;
    ok(!$err, 'user_list succeeded');

    my $found = grep { $_ eq $test_user } @{$resp->{users} || []};
    ok($found, 'our test user is in the list');
    diag("Found " . scalar(@{$resp->{users} || []}) . " users");
    EV::break;
});
my $t7 = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;

$client->user_grant_role($test_user, $test_role, sub {
    my ($resp, $err) = @_;
    ok(!$err, 'user_grant_role succeeded');
    diag("Granted role $test_role to user $test_user");
    EV::break;
});
my $t8 = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;

$client->user_get($test_user, sub {
    my ($resp, $err) = @_;
    ok(!$err, 'user_get succeeded');
    my $has_role = grep { $_ eq $test_role } @{$resp->{roles} || []};
    ok($has_role, 'user has the granted role');
    EV::break;
});
my $t9 = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;

$client->user_revoke_role($test_user, $test_role, sub {
    my ($resp, $err) = @_;
    ok(!$err, 'user_revoke_role succeeded');
    EV::break;
});
my $t10 = EV::timer(5, 0, sub { fail('timeout'); EV::break });
EV::run;