forked from alterminal/alterminal
65 lines
1.7 KiB
Go
65 lines
1.7 KiB
Go
package oidc
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// normalizeScope 應拆解、去重並排序 scope。
|
|
func TestNormalizeScope(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
scope string
|
|
want string
|
|
}{
|
|
{"空字串", "", ""},
|
|
{"多餘空白", " openid profile ", "openid profile"},
|
|
{"去除重複", "profile openid profile", "openid profile"},
|
|
{"排序", "email openid", "email openid"},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
if got := strings.Join(normalizeScope(tt.scope), " "); got != tt.want {
|
|
t.Fatalf("normalizeScope(%q) = %q, want %q", tt.scope, got, tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
// scopeCovered 判斷請求 scope 是否全數涵蓋於已同意集合。
|
|
func TestScopeCovered(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
granted string
|
|
requested string
|
|
want bool
|
|
}{
|
|
{"完全相同", "openid profile", "openid profile", true},
|
|
{"請求子集", "openid profile email", "openid email", true},
|
|
{"請求超出", "openid", "openid email", false},
|
|
{"完全無關", "openid", "profile", false},
|
|
{"空請求", "openid", "", true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
if got := scopeCovered(tt.granted, tt.requested); got != tt.want {
|
|
t.Fatalf("scopeCovered(%q, %q) = %v, want %v", tt.granted, tt.requested, got, tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
// sha256Token 輸出長度應為 43 字元（32 bytes 的 base64url）。
|
|
func TestSha256Token(t *testing.T) {
|
|
got := sha256Token("test")
|
|
if len(got) != 43 {
|
|
t.Fatalf("SHA-256 base64url 長度 = %d, want 43", len(got))
|
|
}
|
|
if sha256Token("test") != got {
|
|
t.Fatal("同一輸入應得相同雜湊")
|
|
}
|
|
if sha256Token("other") == got {
|
|
t.Fatal("不同輸入應得不同雜湊")
|
|
}
|
|
}
|