mirror of https://github.com/abpframework/abp.git
maliming
1 month ago
5 changed files with 200 additions and 374 deletions
@ -0,0 +1,138 @@ |
|||||
|
using System.Threading.Tasks; |
||||
|
using Microsoft.AspNetCore.Identity; |
||||
|
using Shouldly; |
||||
|
using Volo.Abp.Uow; |
||||
|
using Xunit; |
||||
|
|
||||
|
namespace Volo.Abp.Identity.AspNetCore; |
||||
|
|
||||
|
/// <summary>
|
||||
|
/// Abstract base class that exercises the common behaviour of every
|
||||
|
/// <see cref="AbpSingleActiveTokenProvider"/> subclass.
|
||||
|
/// Concrete subclasses inject their provider-specific generate/verify helpers
|
||||
|
/// so the same test suite runs against each provider.
|
||||
|
/// </summary>
|
||||
|
public abstract class AbpSingleActiveTokenProviderTestBase : AbpIdentityAspNetCoreTestBase |
||||
|
{ |
||||
|
protected IIdentityUserRepository UserRepository { get; } |
||||
|
protected IdentityUserManager UserManager { get; } |
||||
|
protected IdentityTestData TestData { get; } |
||||
|
protected IUnitOfWorkManager UnitOfWorkManager { get; } |
||||
|
|
||||
|
protected AbpSingleActiveTokenProviderTestBase() |
||||
|
{ |
||||
|
UserRepository = GetRequiredService<IIdentityUserRepository>(); |
||||
|
UserManager = GetRequiredService<IdentityUserManager>(); |
||||
|
TestData = GetRequiredService<IdentityTestData>(); |
||||
|
UnitOfWorkManager = GetRequiredService<IUnitOfWorkManager>(); |
||||
|
} |
||||
|
|
||||
|
/// <summary>Generates a token for <paramref name="user"/> via the provider under test.</summary>
|
||||
|
protected abstract Task<string> GenerateTokenAsync(IdentityUser user); |
||||
|
|
||||
|
/// <summary>Verifies <paramref name="token"/> for <paramref name="user"/> via the provider under test.</summary>
|
||||
|
protected abstract Task<bool> VerifyTokenAsync(IdentityUser user, string token); |
||||
|
|
||||
|
/// <summary>Returns the provider name used to look up the stored hash.</summary>
|
||||
|
protected abstract string GetProviderName(); |
||||
|
|
||||
|
/// <summary>Returns the token purpose used as the hash key prefix.</summary>
|
||||
|
protected abstract string GetPurpose(); |
||||
|
|
||||
|
private string GetHashKey() => GetPurpose() + AbpSingleActiveTokenProvider.TokenHashSuffix; |
||||
|
|
||||
|
[Fact] |
||||
|
public async Task Generate_And_Verify_Token_Should_Succeed() |
||||
|
{ |
||||
|
using (var uow = UnitOfWorkManager.Begin()) |
||||
|
{ |
||||
|
var user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
|
||||
|
var token = await GenerateTokenAsync(user); |
||||
|
token.ShouldNotBeNullOrEmpty(); |
||||
|
|
||||
|
user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
(await VerifyTokenAsync(user, token)).ShouldBeTrue(); |
||||
|
|
||||
|
await uow.CompleteAsync(); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public async Task Invalid_Token_Should_Fail_Verification() |
||||
|
{ |
||||
|
using (var uow = UnitOfWorkManager.Begin()) |
||||
|
{ |
||||
|
var user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
await GenerateTokenAsync(user); |
||||
|
|
||||
|
user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
(await VerifyTokenAsync(user, "invalid-token-value")).ShouldBeFalse(); |
||||
|
|
||||
|
await uow.CompleteAsync(); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public async Task Second_Token_Should_Invalidate_First_Token() |
||||
|
{ |
||||
|
using (var uow = UnitOfWorkManager.Begin()) |
||||
|
{ |
||||
|
var user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
var firstToken = await GenerateTokenAsync(user); |
||||
|
|
||||
|
user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
var secondToken = await GenerateTokenAsync(user); |
||||
|
|
||||
|
user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
|
||||
|
(await VerifyTokenAsync(user, firstToken)).ShouldBeFalse(); |
||||
|
(await VerifyTokenAsync(user, secondToken)).ShouldBeTrue(); |
||||
|
|
||||
|
await uow.CompleteAsync(); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public async Task Corrupted_Hash_Should_Return_False_Instead_Of_Throwing() |
||||
|
{ |
||||
|
using (var uow = UnitOfWorkManager.Begin()) |
||||
|
{ |
||||
|
var user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
var token = await GenerateTokenAsync(user); |
||||
|
|
||||
|
// Overwrite with a non-hex string to simulate data corruption.
|
||||
|
user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
await UserManager.SetAuthenticationTokenAsync(user, GetProviderName(), GetHashKey(), "not-valid-hex!!!"); |
||||
|
|
||||
|
user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
|
||||
|
// ValidateAsync must catch FormatException internally and return false.
|
||||
|
(await VerifyTokenAsync(user, token)).ShouldBeFalse(); |
||||
|
|
||||
|
await uow.CompleteAsync(); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public async Task Token_Hash_Should_Persist_Across_UnitOfWork_Boundaries() |
||||
|
{ |
||||
|
string token; |
||||
|
|
||||
|
// UoW 1: generate; UpdateAsync inside GenerateAsync must write the hash to the DB.
|
||||
|
using (var uow = UnitOfWorkManager.Begin(requiresNew: true)) |
||||
|
{ |
||||
|
var user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
token = await GenerateTokenAsync(user); |
||||
|
await uow.CompleteAsync(); |
||||
|
} |
||||
|
|
||||
|
// UoW 2: validate with a fresh DbContext to confirm the hash was persisted.
|
||||
|
using (var uow = UnitOfWorkManager.Begin(requiresNew: true)) |
||||
|
{ |
||||
|
var user = await UserRepository.GetAsync(TestData.UserJohnId); |
||||
|
(await VerifyTokenAsync(user, token)).ShouldBeTrue(); |
||||
|
await uow.CompleteAsync(); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
Loading…
Reference in new issue