lenso-module-auth 0.2.4

First-party auth anchor module for the Lenso backend framework.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

use auth::models::AuthUserId;
use auth::public::{create_anonymous_user_identity_in_tx, link_identity_to_anonymous_user_in_tx};
use auth::repositories::{AuthUserRepository, PostgresAuthUserRepository};
use chrono::Utc;
use platform_core::{Migration, PLATFORM_MIGRATIONS, apply_migrations};
use platform_testing::TestDatabase;

fn migrations() -> Vec<Migration> {
    PLATFORM_MIGRATIONS
        .iter()
        .chain(auth::migrations::AUTH_MIGRATIONS)
        .copied()
        .collect()
}

#[tokio::test]
async fn linking_provider_identity_marks_anonymous_user_permanent() {
    let Some(db) = TestDatabase::create().await else {
        return;
    };
    apply_migrations(&db.pool, &migrations())
        .await
        .expect("migrations apply");

    let now = Utc::now();
    let user_id = AuthUserId("usr_anonymous_link".to_owned());
    let mut tx = db.pool.begin().await.expect("begin tx");
    create_anonymous_user_identity_in_tx(
        &mut tx,
        user_id.clone(),
        "auth_identity_anonymous_link".to_owned(),
        "anonymous",
        "anon_subject_link",
        now,
    )
    .await
    .expect("anonymous identity");
    tx.commit().await.expect("commit anonymous user");

    let repo = PostgresAuthUserRepository::new(db.pool.clone());
    let anonymous_user = repo
        .find_by_id(&user_id)
        .await
        .expect("find anonymous user")
        .expect("anonymous user exists");
    assert!(anonymous_user.is_anonymous);

    let mut tx = db.pool.begin().await.expect("begin tx");
    let linked = link_identity_to_anonymous_user_in_tx(
        &mut tx,
        &user_id,
        "auth_identity_password_link".to_owned(),
        "password",
        "anon@example.com",
        now,
    )
    .await
    .expect("link password identity");
    tx.commit().await.expect("commit link");

    assert_eq!(linked.user_id, user_id);
    let permanent_user = repo
        .find_by_id(&user_id)
        .await
        .expect("find linked user")
        .expect("linked user exists");
    assert!(!permanent_user.is_anonymous);

    let providers = sqlx::query_scalar::<_, String>(
        r#"
        select provider
        from auth.identities
        where user_id = $1
        order by provider
        "#,
    )
    .bind(&user_id.0)
    .fetch_all(&db.pool)
    .await
    .expect("identity providers");
    assert_eq!(providers, vec!["anonymous", "password"]);

    db.cleanup().await;
}