mirror of
https://github.com/crowdsecurity/crowdsec.git
synced 2025-05-12 21:05:53 +02:00
47 lines
1.3 KiB
Go
47 lines
1.3 KiB
Go
package apiserver
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestAPIKey(t *testing.T) {
|
|
ctx := context.Background()
|
|
router, config := NewAPITest(t, ctx)
|
|
|
|
APIKey := CreateTestBouncer(t, ctx, config.API.Server.DbConfig)
|
|
|
|
// Login with empty token
|
|
w := httptest.NewRecorder()
|
|
req, _ := http.NewRequestWithContext(ctx, http.MethodGet, "/v1/decisions", strings.NewReader(""))
|
|
req.Header.Add("User-Agent", UserAgent)
|
|
router.ServeHTTP(w, req)
|
|
|
|
assert.Equal(t, 403, w.Code)
|
|
assert.Equal(t, `{"message":"access forbidden"}`, w.Body.String())
|
|
|
|
// Login with invalid token
|
|
w = httptest.NewRecorder()
|
|
req, _ = http.NewRequestWithContext(ctx, http.MethodGet, "/v1/decisions", strings.NewReader(""))
|
|
req.Header.Add("User-Agent", UserAgent)
|
|
req.Header.Add("X-Api-Key", "a1b2c3d4e5f6")
|
|
router.ServeHTTP(w, req)
|
|
|
|
assert.Equal(t, 403, w.Code)
|
|
assert.Equal(t, `{"message":"access forbidden"}`, w.Body.String())
|
|
|
|
// Login with valid token
|
|
w = httptest.NewRecorder()
|
|
req, _ = http.NewRequestWithContext(ctx, http.MethodGet, "/v1/decisions", strings.NewReader(""))
|
|
req.Header.Add("User-Agent", UserAgent)
|
|
req.Header.Add("X-Api-Key", APIKey)
|
|
router.ServeHTTP(w, req)
|
|
|
|
assert.Equal(t, 200, w.Code)
|
|
assert.Equal(t, "null", w.Body.String())
|
|
}
|