2022-04-28 19:07:04 +00:00
|
|
|
// Copyright 2022 the Pinniped contributors. All Rights Reserved.
|
|
|
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
|
|
2022-04-28 16:11:51 +00:00
|
|
|
package login
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"net/http"
|
|
|
|
|
"net/http/httptest"
|
|
|
|
|
"testing"
|
|
|
|
|
|
|
|
|
|
"go.pinniped.dev/internal/testutil"
|
|
|
|
|
|
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
|
|
|
|
|
|
"go.pinniped.dev/internal/oidc"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
func TestGetLogin(t *testing.T) {
|
|
|
|
|
const (
|
|
|
|
|
happyLdapIDPName = "some-ldap-idp"
|
|
|
|
|
happyGetResult = `<!DOCTYPE html>
|
|
|
|
|
<html>
|
|
|
|
|
<body>
|
|
|
|
|
|
|
|
|
|
<h1>Pinniped</h1>
|
|
|
|
|
<p>some-ldap-idp</p>
|
|
|
|
|
|
2022-04-28 19:07:04 +00:00
|
|
|
<form action="/login" method="post">
|
|
|
|
|
|
|
|
|
|
<div>
|
|
|
|
|
<label for="username"><b>Username</b></label>
|
|
|
|
|
<input type="text" placeholder="Username" name="username" id="username" required>
|
|
|
|
|
</div>
|
2022-04-28 16:11:51 +00:00
|
|
|
|
|
|
|
|
<div>
|
2022-04-28 19:07:04 +00:00
|
|
|
<label for="password"><b>Password</b></label>
|
|
|
|
|
<input type="password" placeholder="Password" name="password" id="password" required>
|
2022-04-28 16:11:51 +00:00
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<div>
|
2022-04-28 19:07:04 +00:00
|
|
|
<input type="hidden" name="state" id="state" value="foo">
|
2022-04-28 16:11:51 +00:00
|
|
|
</div>
|
|
|
|
|
|
2022-04-28 19:07:04 +00:00
|
|
|
<button type="submit" name="submit" id="submit">Login</button>
|
2022-04-28 16:11:51 +00:00
|
|
|
|
|
|
|
|
</form>
|
|
|
|
|
|
|
|
|
|
</body>
|
|
|
|
|
</html>`
|
|
|
|
|
)
|
|
|
|
|
tests := []struct {
|
|
|
|
|
name string
|
|
|
|
|
decodedState *oidc.UpstreamStateParamData
|
|
|
|
|
encodedState string
|
|
|
|
|
idps oidc.UpstreamIdentityProvidersLister
|
|
|
|
|
wantStatus int
|
|
|
|
|
wantContentType string
|
|
|
|
|
wantBody string
|
|
|
|
|
}{
|
|
|
|
|
{
|
|
|
|
|
name: "Happy path ldap",
|
|
|
|
|
decodedState: &oidc.UpstreamStateParamData{
|
|
|
|
|
UpstreamName: happyLdapIDPName,
|
|
|
|
|
UpstreamType: "ldap",
|
|
|
|
|
},
|
|
|
|
|
encodedState: "foo", // the encoded and decoded state don't match, but that verification is handled one level up.
|
|
|
|
|
wantStatus: http.StatusOK,
|
|
|
|
|
wantContentType: htmlContentType,
|
|
|
|
|
wantBody: happyGetResult,
|
|
|
|
|
},
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
for _, test := range tests {
|
|
|
|
|
tt := test
|
|
|
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
|
|
|
handler := NewGetHandler(tt.idps)
|
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "/login", nil)
|
|
|
|
|
rsp := httptest.NewRecorder()
|
|
|
|
|
err := handler(rsp, req, tt.encodedState, tt.decodedState)
|
|
|
|
|
require.NoError(t, err)
|
|
|
|
|
|
|
|
|
|
require.Equal(t, test.wantStatus, rsp.Code)
|
|
|
|
|
testutil.RequireEqualContentType(t, rsp.Header().Get("Content-Type"), tt.wantContentType)
|
|
|
|
|
body := rsp.Body.String()
|
|
|
|
|
require.Equal(t, tt.wantBody, body)
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
}
|
