mirror of
https://github.com/CommunitySolidServer/CommunitySolidServer.git
synced 2024-10-03 14:55:10 +00:00
fix: Accept lowercase Authorization tokens.
This commit is contained in:
@@ -62,6 +62,21 @@ describe('A BearerWebIdExtractor', (): void => {
|
||||
});
|
||||
});
|
||||
|
||||
describe('on a request with Authorization and a lowercase Bearer token', (): void => {
|
||||
const request = {
|
||||
method: 'GET',
|
||||
headers: {
|
||||
authorization: 'bearer token-1234',
|
||||
},
|
||||
} as any as HttpRequest;
|
||||
|
||||
it('calls the Bearer verifier with the correct parameters.', async(): Promise<void> => {
|
||||
await webIdExtractor.handleSafe(request);
|
||||
expect(solidTokenVerifier).toHaveBeenCalledTimes(1);
|
||||
expect(solidTokenVerifier).toHaveBeenCalledWith('bearer token-1234');
|
||||
});
|
||||
});
|
||||
|
||||
describe('when verification throws an error', (): void => {
|
||||
const request = {
|
||||
method: 'GET',
|
||||
|
||||
@@ -90,6 +90,22 @@ describe('A DPoPWebIdExtractor', (): void => {
|
||||
});
|
||||
});
|
||||
|
||||
describe('on a request with Authorization specifying DPoP in lowercase', (): void => {
|
||||
const request = {
|
||||
method: 'GET',
|
||||
headers: {
|
||||
authorization: 'dpop token-1234',
|
||||
dpop: 'token-5678',
|
||||
},
|
||||
} as any as HttpRequest;
|
||||
|
||||
it('calls the target extractor with the correct parameters.', async(): Promise<void> => {
|
||||
await webIdExtractor.handleSafe(request);
|
||||
expect(targetExtractor.handle).toHaveBeenCalledTimes(1);
|
||||
expect(targetExtractor.handle).toHaveBeenCalledWith({ request });
|
||||
});
|
||||
});
|
||||
|
||||
describe('when verification throws an error', (): void => {
|
||||
const request = {
|
||||
method: 'GET',
|
||||
|
||||
@@ -20,9 +20,15 @@ describe('An UnsecureWebIdExtractor', (): void => {
|
||||
await expect(result).rejects.toThrow('No WebID Authorization header specified.');
|
||||
});
|
||||
|
||||
it('returns the authorization header as WebID if there is one.', async(): Promise<void> => {
|
||||
it('returns the authorization header as WebID if specified.', async(): Promise<void> => {
|
||||
const headers = { authorization: 'WebID http://alice.example/card#me' };
|
||||
const result = extractor.handleSafe({ headers } as HttpRequest);
|
||||
await expect(result).resolves.toEqual({ [CredentialGroup.agent]: { webId: 'http://alice.example/card#me' }});
|
||||
});
|
||||
|
||||
it('returns the authorization header as WebID if specified with a lowercase token.', async(): Promise<void> => {
|
||||
const headers = { authorization: 'webid http://alice.example/card#me' };
|
||||
const result = extractor.handleSafe({ headers } as HttpRequest);
|
||||
await expect(result).resolves.toEqual({ [CredentialGroup.agent]: { webId: 'http://alice.example/card#me' }});
|
||||
});
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user