cartodb4/Windshaft-cartodb
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

get and check api key credentials from api key: username and token

Browse Source
This commit is contained in:
Eneko Lakasta
2018-02-15 17:49:47 +01:00
parent 11aa4d12bd
commit cda2616a8a
8 changed files with 127 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/unit/cartodb/prepare-context.test.js
+26 -7
View File
@@ -10,7 +10,7 @@ var TemplateMaps = require('../../../lib/cartodb/backends/template_maps');
const cleanUpQueryParamsMiddleware = require('../../../lib/cartodb/middleware/context/clean-up-query-params');
const authorizeMiddleware = require('../../../lib/cartodb/middleware/context/authorize');
const dbConnSetupMiddleware = require('../../../lib/cartodb/middleware/context/db-conn-setup');
const apikeyTokenMiddleware = require('../../../lib/cartodb/middleware/context/apikey-token');
const apikeyCredentialsMiddleware = require('../../../lib/cartodb/middleware/context/apikey-credentials');
const localsMiddleware = require('../../../lib/cartodb/middleware/context/locals');
var windshaft = require('windshaft');
@@ -24,7 +24,7 @@ describe('prepare-context', function() {
let cleanUpQueryParams;
let dbConnSetup;
let authorize;
let setApikeyToken;
let setApikeyCredentials;
before(function() {
var redisPool = new RedisPool(global.environment.redis);
@@ -37,7 +37,7 @@ describe('prepare-context', function() {
cleanUpQueryParams = cleanUpQueryParamsMiddleware();
authorize = authorizeMiddleware(authApi);
dbConnSetup = dbConnSetupMiddleware(pgConnection);
setApikeyToken = apikeyTokenMiddleware();
setApikeyCredentials = apikeyCredentialsMiddleware();
});
@@ -194,7 +194,7 @@ describe('prepare-context', function() {
}
};
var res = {};
setApikeyToken(prepareRequest(req), prepareResponse(res), function (err) {
setApikeyCredentials(prepareRequest(req), prepareResponse(res), function (err) {
if (err) {
return done(err);
}
@@ -215,7 +215,7 @@ describe('prepare-context', function() {
}
};
var res = {};
setApikeyToken(prepareRequest(req), prepareResponse(res), function (err) {
setApikeyCredentials(prepareRequest(req), prepareResponse(res), function (err) {
if (err) {
return done(err);
}
@@ -230,11 +230,30 @@ describe('prepare-context', function() {
var req = {
headers: {
host: 'localhost',
authorization: 'Basic dXNlcjoxMjM0', // user: user, password: 1234
authorization: 'Basic bG9jYWxob3N0OjEyMzQ=', // user: localhost, password: 1234
}
};
var res = {};
setApikeyToken(prepareRequest(req), prepareResponse(res), function (err) {
setApikeyCredentials(prepareRequest(req), prepareResponse(res), function (err) {
if (err) {
return done(err);
}
var query = res.locals;
assert.equal('1234', query.api_key);
done();
});
});
it('fail from http header with user mismatch', function (done) {
var req = {
headers: {
host: 'localhost',
authorization: 'Basic YW5vdGhlcl91c2VyOjEyMzQ=', // user: another_user, password: 1234
}
};
var res = {};
setApikeyCredentials(prepareRequest(req), prepareResponse(res), function (err) {
if (err) {
return done(err);
}