view release on metacpan or  search on metacpan

t/unit/200-actionrole-request-auth.t  view on Meta::CPAN

use strictures 1;
use Test::More;
use Test::Exception;
use Plack::Test;
use HTTP::Request::Common;
use URI;
use Moose::Util;

use lib 't/lib';
use Catalyst::Test 'AuthServer';



{
  my ($res, $c) = ctx_request('/request');
  ok( !$c->req->can('oauth2'),
    "doesn't install oauth2 accessors before the dispatch" );
  ok( !Moose::Util::does_role( $c->req, 'CatalystX::OAuth2::Request' ) );
  $c->dispatch;
  is(
    $c->res->body,
    'warning: response_type/client_id invalid or missing',
    'displays warning to resource owner'
  );

  # I'm removing this test since in newer Perl you are never sure if you get
  # response_type or client_id missing (hashref random order I imagine).  Also
  # on newer Catalyst this error is not getting into the Log.  I don't yet know
  # why...
  #like($c->log->_body, qr/\[error\] Attribute \(response_type\) is required/);
  ## ^^ JNAP noted the error is still reported just not in ->error, possible some
  ## issue with how the $c mocking works.

  is_deeply( $c->error, [], 'dispatches to request action cleanly' );
  ok( !$c->req->can('oauth2'),
    "doesn't install oauth2 accessors if request isn't valid" );
  ok( !Moose::Util::does_role( $c->req, 'CatalystX::OAuth2::Request' ) );
}

{
  my $uri   = URI->new('/request');
  my $query = {
    response_type => 'code',
    client_id     => 1,
    state         => 'bar',
    redirect_uri  => 'http://localhost/auth'
  };

  $uri->query_form($query);
  my ($res2, $c) = ctx_request($uri);
  $c->dispatch;
  is_deeply( $c->error, [], 'dispatches to request action cleanly' );
  is( $c->res->body, undef, q{doesn't produce warning} );
  ok( $c->req->can('oauth2'),
    "installs oauth2 accessors if request is valid" );
  ok( Moose::Util::does_role( $c->req, 'CatalystX::OAuth2::Request' ) );
  my $res    = $c->res;
  my $client = $c->controller->store->find_client(1);
  ok( my $redirect = $c->req->oauth2->next_action_uri( $c->controller, $c ) );
  is( $res->location, $redirect, 'redirects to the correct action' );
  is_deeply( { $redirect->query_form }, { %$query, code => 1 } )
    or diag(Data::Dump::dump({$redirect->query_form}));
  is( $client->codes,                   1 );
  is( $client->codes->first->as_string, 1 );
  is( $res->status,                     302 );