auth_lite 0.1.1

A simple authentication server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

use auth_lite::{auth, server};
use axum::{
    body::Body,
    http::{
        header::{AUTHORIZATION, WWW_AUTHENTICATE},
        HeaderValue, Request, StatusCode,
    },
};
use base64::{engine::general_purpose::STANDARD as Base64, Engine};
use tower::ServiceExt;

mod support;

#[tokio::test]
async fn successful_auth_request() -> anyhow::Result<()> {
    let (pool, _db_file) = support::create_test_db().await?;
    auth::create_user(&pool, "test-user", "test-password").await?;

    let app = server::app(pool.clone());
    let request = Request::builder()
        .uri("/auth")
        .header(
            AUTHORIZATION,
            format!("Basic {}", Base64.encode("test-user:test-password")),
        )
        .body(Body::empty())?;
    let response = app.oneshot(request).await?;

    assert_eq!(response.status(), StatusCode::OK);

    Ok(())
}

#[tokio::test]
async fn failed_auth_request_missing_user() -> anyhow::Result<()> {
    let (pool, _db_file) = support::create_test_db().await?;

    let app = server::app(pool.clone());
    let request = Request::builder()
        .uri("/auth")
        .header(
            AUTHORIZATION,
            format!("Basic {}", Base64.encode("test-user:test-password")),
        )
        .body(Body::empty())?;
    let response = app.oneshot(request).await?;

    assert_eq!(response.status(), StatusCode::UNAUTHORIZED);

    Ok(())
}

#[tokio::test]
async fn failed_auth_request_bad_password() -> anyhow::Result<()> {
    let (pool, _db_file) = support::create_test_db().await?;
    auth::create_user(&pool, "test-user", "test-password").await?;

    let app = server::app(pool.clone());
    let request = Request::builder()
        .uri("/auth")
        .header(
            AUTHORIZATION,
            format!("Basic {}", Base64.encode("test-user:bad-password")),
        )
        .body(Body::empty())?;
    let response = app.oneshot(request).await?;

    assert_eq!(response.status(), StatusCode::UNAUTHORIZED);

    Ok(())
}

#[tokio::test]
async fn failed_auth_no_header() -> anyhow::Result<()> {
    let (pool, _db_file) = support::create_test_db().await?;

    let app = server::app(pool.clone());
    let request = Request::builder().uri("/auth").body(Body::empty())?;
    let response = app.oneshot(request).await?;

    assert_eq!(response.status(), StatusCode::UNAUTHORIZED);
    assert_eq!(
        response.headers().get(WWW_AUTHENTICATE).unwrap(),
        HeaderValue::from_static("Basic realm=\"auth-lite\"")
    );

    Ok(())
}