async def test_refresh_jwt_required_fail(test_cli):
    # Missing authorization header
    resp = await test_cli.get('/protected')
    assert resp.status == 401
    assert await resp.json() == {"msg": DunnoValue(str)}

    # Bad authorization header key
    token = JWT.create_refresh_token("user")
    resp = await test_cli.get(
        '/protected',
        headers={JWT.config.refresh_jwt_header_key: f"Token {token}"})
    assert resp.status == 422
    assert await resp.json() == {"msg": DunnoValue(str)}

    # Wrong token type
    access_token = JWT.create_access_token("user")
    resp = await test_cli.get(
        "/protected",
        headers={
            JWT.config.refresh_jwt_header_key:
            f"{JWT.config.refresh_jwt_header_prefix} {access_token}"
        },
    )
    assert resp.status == 422
    assert await resp.json() == {"msg": DunnoValue(str)}
Exemplo n.º 2
0
async def test_refresh_jwt_required(test_cli):
    token = JWT.create_refresh_token("user")

    resp = await test_cli.get(
        '/protected',
        headers={
            JWT.config.refresh_jwt_header_key: f"{JWT.config.refresh_jwt_header_prefix} {token}"
        },
    )
    assert resp.status_code == 204
Exemplo n.º 3
0
async def test_jwt_optional_fail(test_cli):
    # Wrong token
    token = "xxx.yyy.zzz"
    resp = await test_cli.get(
        "/protected",
        headers={
            JWT.config.jwt_header_key:
            f"{JWT.config.jwt_header_prefix} {token}"
        },
    )
    assert resp.status_code == 422
    assert resp.json() == {"msg": DunnoValue(str)}

    # Wrong token type
    refresh_token = JWT.create_refresh_token("user")
    resp = await test_cli.get(
        "/protected",
        headers={
            JWT.config.jwt_header_key:
            f"{JWT.config.jwt_header_prefix} {refresh_token}"
        },
    )
    assert resp.status_code == 422
    assert resp.json() == {"msg": DunnoValue(str)}