sdk_test.go

package login_sdk_go

import (
	"github.com/golang-jwt/jwt/v5"
	"testing"

	"github.com/stretchr/testify/require"
)

func TestValidateMalformedToken(t *testing.T) {
	token := ""
	loginSgk, _ := New(Config{})
	_, err := loginSgk.Validate(token)

	require.False(t, err.Valid())
}

func TestValidateHmacToken(t *testing.T) {
	token := "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJ4c29sbGFfbG9naW5fcHJvamVjdF9pZCI6IjEyMyIsImp0aSI6InRlc3QtanRpIn0.Y8NT2mX8q7MshRGUElQMWEhoLa8hnS2rZ3BL5XgtcVo"
	loginSgk, _ := New(Config{
		ShaSecretKey: "your-256-bit-secret",
	})
	parsedToken, err := loginSgk.Validate(token)

	require.IsType(t, &jwt.Token{}, parsedToken)
	require.True(t, parsedToken.Valid)
	require.True(t, err.Valid())

	if !err.Valid() {
		t.Fatal(err)
	}
}

func TestValidateValidHmacTokenWithLoginApi(t *testing.T) {
	token := "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJ4c29sbGFfbG9naW5fcHJvamVjdF9pZCI6IjEyMyIsImp0aSI6InRlc3QtanRpIn0.Y8NT2mX8q7MshRGUElQMWEhoLa8hnS2rZ3BL5XgtcVo"
	loginSgk, _ := New(Config{})
	parsedToken, err := loginSgk.Validate(token)

	require.IsType(t, &jwt.Token{}, parsedToken)
	require.False(t, err.Valid())
}

func TestValidateExpiredRsaToken(t *testing.T) {
	token := "eyJhbGciOiJSUzI1NiIsImtpZCI6InNnRnk0NjRrVk5YVFo2YmVYM0tFT2kyam1yWnA4bUQiLCJ0eXAiOiJKV1QifQ.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.PaOD3zvCVxqhpTUb1qD9zhnbtumRVoBqpLTCyvhS0cOF-zl2hpCnZO_brJgR0eTNyaAcYdR1Q87ZxdUvs_ILsXAdPLNoazK22X4tO17VV6HsqyIx47_6KHeNU42Z8PXY59ZDXTSWU7m9J1-8vRnuGYN10QNmr7kqPR21i-xsr8D0pV2sn23GWgvlZr3m2-zZQTRBu_xE2IMtwyaTDCUweY7NWvGPB8O3E_CBDXOxH6DD6j42mLZ7XabjWTcd8zwQNNA9kmmAEN3D3LMwuKeU2xHhM6eRT6--xTccr8jTeuQDetWekdSQRZxGWOJlq_iyO_dne7snwOCSQ9MP1GbFGg"
	loginSgk, _ := New(Config{
		IgnoreSslErrors: true,
	})
	_, err := loginSgk.Validate(token)

	require.False(t, err.Valid())
}

type testClaims struct {
	jwt.RegisteredClaims
	ProjectID string `json:"xsolla_login_project_id,omitempty"`
}

func (t testClaims) Valid() error {
	return nil
}

func (t testClaims) GetProjectID() string {
	return t.ProjectID
}

func TestValidateWithClaims(t *testing.T) {
	type want struct {
		hasError   bool
		hasToken   bool
		tokenValid bool
	}

	testCases := []struct {
		name   string
		token  string
		config Config
		want   want
	}{
		{
			name:   "empty token",
			token:  "",
			config: Config{},
			want: want{
				hasError:   true,
				hasToken:   false,
				tokenValid: false,
			},
		},
		{
			name:  "hmac token",
			token: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJ4c29sbGFfbG9naW5fcHJvamVjdF9pZCI6IjEyMyIsImp0aSI6InRlc3QtanRpIn0.Y8NT2mX8q7MshRGUElQMWEhoLa8hnS2rZ3BL5XgtcVo",
			config: Config{
				ShaSecretKey: "your-256-bit-secret",
			},
			want: want{
				hasError:   false,
				hasToken:   true,
				tokenValid: true,
			},
		},
		{
			name:   "hmac token with login api",
			token:  "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJ4c29sbGFfbG9naW5fcHJvamVjdF9pZCI6IjEyMyIsImp0aSI6InRlc3QtanRpIn0.Y8NT2mX8q7MshRGUElQMWEhoLa8hnS2rZ3BL5XgtcVo",
			config: Config{},
			want: want{
				hasError:   true,
				hasToken:   false,
				tokenValid: false,
			},
		},
	}

	for _, tc := range testCases {
		t.Run(tc.name, func(t *testing.T) {
			loginSgk, _ := New(tc.config)
			token, err := loginSgk.ValidateWithClaims(tc.token, &testClaims{})

			if tc.want.hasError {
				require.NotNil(t, err)
			}

			if tc.want.hasToken {
				require.Equal(t, tc.want.tokenValid, token.Valid)
			}
		})
	}
}