hapi-auth-jwt2/test/scheme-payload.test.cjs

Hapi.js Authentication Plugin/Scheme using JSON Web Tokens (JWT)

const test = require('tape');
const JWT = require('jsonwebtoken');
const secret = 'NeverShareYourSecret';
const Boom = require('@hapi/boom');

const server = require('./scheme-payload-server.cjs');

const mismatchTest = async function(url, t) {
    const token = JWT.sign({ id: 123 }, secret);
    const options = {
        method: "POST",
        url,
        payload: { id: 124 },
        headers: { authorization: "Bearer " + token }
    };

    const response = await server.inject(options);
    const expected = Boom.unauthorized("You don't have authorization");
    t.equal(response.payload, JSON.stringify(expected.output.payload), "Mismatch should fail");
    t.end();
};

const matchingTest = async function (url, t) {
    const token = JWT.sign({ id: 123 }, secret);
    const options = {
        method: "POST",
        url: "/",
        payload: { id: 123 },
        headers: { authorization: "Bearer " + token }
    };

    const response = await server.inject(options);
    t.equal(response.payload, 'Hi', "Matching pass");
    t.end();
};

test("No payload function", async function (t) {
    const token = JWT.sign({ id: 123 }, secret);
    const options = {
        method: "POST",
        url: '/noPayload',
        payload: { id: 124 },
        headers: { authorization: "Bearer " + token }
    };

    const response = await server.inject(options);
    t.equal(response.payload, 'Hi', "Pass");
    t.end();
});

test("Mismatch payload info required for auth", async function (t) {
    mismatchTest('/', t);
});

test("Matching payload info required for auth", async function (t) {
    matchingTest('/', t);
});

test("Mismatch payload info required for auth (async)", async function (t) {
    mismatchTest('/async', t);
});

test("Matching payload info required for auth (async)", async function (t) {
    matchingTest('/async', t);
});