66 lines
2.2 KiB
Go
66 lines
2.2 KiB
Go
|
package handlers
|
||
|
|
|
||
|
|
import (
|
||
|
|
"encoding/json"
|
||
|
|
"log/slog"
|
||
|
|
"net/http"
|
||
|
|
"net/http/httptest"
|
||
|
|
"net/url"
|
||
|
|
"testing"
|
||
|
|
|
||
|
|
"git.unbound.se/unboundsoftware/auth0mock/store"
|
||
|
|
)
|
||
|
|
|
||
|
|
func searchUsers(t *testing.T, h *ManagementHandler, q string) (int, []UserResponse) {
|
||
|
|
t.Helper()
|
||
|
|
req := httptest.NewRequest(http.MethodGet, "/api/v2/users?search_engine=v3&include_totals=true&q="+url.QueryEscape(q), nil)
|
||
|
|
rec := httptest.NewRecorder()
|
||
|
|
h.SearchUsers(rec, req)
|
||
|
|
if rec.Code != http.StatusOK {
|
||
|
|
return rec.Code, nil
|
||
|
|
}
|
||
|
|
var body struct {
|
||
|
|
Total int `json:"total"`
|
||
|
|
Users []UserResponse `json:"users"`
|
||
|
|
}
|
||
|
|
if err := json.NewDecoder(rec.Body).Decode(&body); err != nil {
|
||
|
|
t.Fatalf("decode: %v", err)
|
||
|
|
}
|
||
|
|
if body.Total != len(body.Users) {
|
||
|
|
t.Fatalf("total %d, users %d", body.Total, len(body.Users))
|
||
|
|
}
|
||
|
|
return rec.Code, body.Users
|
||
|
|
}
|
||
|
|
|
||
|
|
// The search matches email in any letter case, as Auth0's does: a backend that
|
||
|
|
// checks whether an address is taken must find it however it was typed.
|
||
|
|
func TestSearchUsersMatchesEmailInAnyCase(t *testing.T) {
|
||
|
|
users := store.NewUserStore()
|
||
|
|
users.Create("anna@kpmg.se", &store.User{GivenName: "Anna"})
|
||
|
|
users.Create("bob@acme.se", &store.User{GivenName: "Bob"})
|
||
|
|
h := NewManagementHandler(users, slog.New(slog.DiscardHandler))
|
||
|
|
|
||
|
|
for _, q := range []string{`email:"anna@kpmg.se"`, `email:"ANNA@KPMG.SE"`, `email:"Anna@Kpmg.se"`} {
|
||
|
|
code, found := searchUsers(t, h, q)
|
||
|
|
if code != http.StatusOK || len(found) != 1 || found[0].UserID != "auth0|anna@kpmg.se" {
|
||
|
|
t.Fatalf("%s: code %d, found %+v", q, code, found)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if _, found := searchUsers(t, h, `email:"nobody@acme.se"`); len(found) != 0 {
|
||
|
|
t.Fatalf("an unknown address found %+v", found)
|
||
|
|
}
|
||
|
|
// A quoted * is part of the address, not a wildcard.
|
||
|
|
if _, found := searchUsers(t, h, `email:"*@kpmg.se"`); len(found) != 0 {
|
||
|
|
t.Fatalf("a quoted * matched %+v", found)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func TestSearchUsersRefusesOtherQueries(t *testing.T) {
|
||
|
|
h := NewManagementHandler(store.NewUserStore(), slog.New(slog.DiscardHandler))
|
||
|
|
for _, q := range []string{"", "name:anna", `email:"a@b.se" OR name:x`} {
|
||
|
|
if code, _ := searchUsers(t, h, q); code != http.StatusBadRequest {
|
||
|
|
t.Fatalf("%q: code %d, want 400", q, code)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|