The Perl and Raku Conference 2025: Greenville, South Carolina - June 27-29 Learn more

THALJEF / Pinto-0.14 / t / 04-server / 02-authentication.t 

            

              
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

              
#!perl
use strict;
use warnings;
use Test::More;
use Plack::Test;
use JSON;
use HTTP::Request::Common;
use Pinto::Server;
use Pinto::Constants qw(:protocol);
use lib 't/lib';
use Pinto::Tester;
use Pinto::Tester::Util qw(make_htpasswd_file);
#------------------------------------------------------------------------------
# Create a repository and configure server
my $t             = Pinto::Tester->new;
my @credentials   = qw(my_login my_password);
my $htpasswd_file = make_htpasswd_file(@credentials);
my $auth          = { backend => 'Passwd', path => $htpasswd_file->stringify };
my %opts          = ( root => $t->pinto->root, auth => $auth );
my $app           = Pinto::Server->new(%opts)->to_app;
my $auth_required_rx = qr/authorization required/i;
my @headers          = (Accept => $PINTO_PROTOCOL_ACCEPT);
#------------------------------------------------------------------------------
test_psgi
    app    => $app,
    client => sub {
    my $cb = shift;
    my $post_req = POST("/action/list", @headers);
    my $post_res = $cb->($post_req);
    ok !$post_res->is_success, 'POST request without authentication failed';
    like $post_res->content, $auth_required_rx, 'Expected content';
    my $get_req = GET("/init/modules/02packages.details.txt.gz");
    my $get_res = $cb->($get_req);
    ok !$get_res->is_success, 'GET request without authentication failed';
    like $get_res->content, $auth_required_rx, 'Expected content';
    };
#------------------------------------------------------------------------------
test_psgi
    app    => $app,
    client => sub {
    my $cb = shift;
    my $post_req = POST("/action/list", @headers);
    $post_req->authorization_basic(@credentials);
    my $post_res = $cb->($post_req);
    ok $post_res->is_success, 'POST request with correct password succeeded';
    like $post_res->content, qr{$PINTO_PROTOCOL_STATUS_OK\n$}, 'Got status-ok';
    my $get_req = GET("modules/02packages.details.txt.gz");
    $get_req->authorization_basic(@credentials);
    my $get_res = $cb->($get_req);
    ok $get_res->is_success, 'POST request with correct password succeeded';
    # TODO: maybe test headers, body.
    };
#------------------------------------------------------------------------------
test_psgi
    app    => $app,
    client => sub {
    my $cb = shift;
    my @bad_credentials = qw(my_login my_bogus_password);
    my $post_req = POST("/action/list", @headers);
    $post_req->authorization_basic(@bad_credentials);
    my $post_res = $cb->($post_req);
    ok !$post_res->is_success, 'POST request with invalid password failed';
    like $post_res->content, $auth_required_rx, 'Expected content';
    my $get_req = GET("/init/modules/02packages.details.txt.gz");
    $get_req->authorization_basic(@bad_credentials);
    my $get_res = $cb->($get_req);
    ok !$get_res->is_success, 'GET request without authentication failed';
    like $get_res->content, $auth_required_rx, 'Expected content';
    };
#------------------------------------------------------------------------------
done_testing;