From 81be4aacd80689542367b1570d4069cba3220ae6 Mon Sep 17 00:00:00 2001
From: Florian Dold <florian@dold.me>
Date: Tue, 2 Mar 2021 20:03:39 +0100
Subject: add merchant instances/auth test case

---
 .../integrationtests/test-merchant-instances.ts    | 138 +++++++++++++++++++++
 1 file changed, 138 insertions(+)
 create mode 100644 packages/taler-wallet-cli/src/integrationtests/test-merchant-instances.ts

(limited to 'packages/taler-wallet-cli/src/integrationtests/test-merchant-instances.ts')

diff --git a/packages/taler-wallet-cli/src/integrationtests/test-merchant-instances.ts b/packages/taler-wallet-cli/src/integrationtests/test-merchant-instances.ts
new file mode 100644
index 000000000..d2e4cd121
--- /dev/null
+++ b/packages/taler-wallet-cli/src/integrationtests/test-merchant-instances.ts
@@ -0,0 +1,138 @@
+/*
+ This file is part of GNU Taler
+ (C) 2021 Taler Systems S.A.
+
+ GNU Taler is free software; you can redistribute it and/or modify it under the
+ terms of the GNU General Public License as published by the Free Software
+ Foundation; either version 3, or (at your option) any later version.
+
+ GNU Taler is distributed in the hope that it will be useful, but WITHOUT ANY
+ WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+ A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License along with
+ GNU Taler; see the file COPYING.  If not, see <http://www.gnu.org/licenses/>
+ */
+
+/**
+ * Imports.
+ */
+import { URL } from "@gnu-taler/taler-wallet-core";
+import axios from "axios";
+import {
+  ExchangeService,
+  GlobalTestState,
+  MerchantApiClient,
+  MerchantService,
+  setupDb,
+} from "./harness";
+
+/**
+ * Do basic checks on instance management and authentication.
+ */
+export async function runMerchantInstancesTest(t: GlobalTestState) {
+  // Set up test environment
+
+  const db = await setupDb(t);
+
+  const exchange = ExchangeService.create(t, {
+    name: "testexchange-1",
+    currency: "TESTKUDOS",
+    httpPort: 8081,
+    database: db.connStr,
+  });
+
+  const merchant = await MerchantService.create(t, {
+    name: "testmerchant-1",
+    currency: "TESTKUDOS",
+    httpPort: 8083,
+    database: db.connStr,
+  });
+
+  // We add the exchange to the config, but note that the exchange won't be started.
+  merchant.addExchange(exchange);
+
+  await merchant.start();
+  await merchant.pingUntilAvailable();
+
+  // Base URL for the default instance.
+  const baseUrl = merchant.makeInstanceBaseUrl();
+
+  {
+    const r = await axios.get(new URL("config", baseUrl).href);
+    console.log(r.data);
+    t.assertDeepEqual(r.data.currency, "TESTKUDOS");
+  }
+
+  // Instances should initially be empty
+  {
+    const r = await axios.get(new URL("private/instances", baseUrl).href);
+    t.assertDeepEqual(r.data.instances, []);
+  }
+
+  // Add an instance, no auth!
+  await merchant.addInstance({
+    id: "default",
+    name: "Default Instance",
+    paytoUris: [`payto://x-taler-bank/merchant-default`],
+    auth: {
+      method: "external",
+    },
+  });
+
+  let merchantClient = new MerchantApiClient(merchant.makeInstanceBaseUrl(), {
+    method: "external",
+  });
+
+  {
+    const r = await merchantClient.getInstances();
+    t.assertDeepEqual(r.instances.length, 1);
+  }
+
+  // Check that a "malformed" bearer Authorization header gets ignored
+  {
+    const url = merchant.makeInstanceBaseUrl();
+    const resp = await axios.get(new URL("private/instances", url).href, {
+      headers: {
+        "Authorization": "foo bar-baz",
+      },
+    });
+    t.assertDeepEqual(resp.status, 200);
+  }
+
+  await merchantClient.changeAuth({
+    method: "token",
+    token: "secret-token:foobar",
+  });
+
+  // Now this should fail, as we didn't change the auth of the client yet.
+  const exc = await t.assertThrowsAsync(async () => {
+    await merchantClient.getInstances();
+  });
+
+  t.assertAxiosError(exc);
+  t.assertAxiosError(exc.response?.status === 401);
+
+  merchantClient = new MerchantApiClient(merchant.makeInstanceBaseUrl(), {
+    method: "token",
+    token: "secret-token:foobar",
+  });
+
+  // With the new client auth settings, request should work again.
+  await merchantClient.getInstances();
+
+  // Now, try some variations.
+
+  {
+    const url = merchant.makeInstanceBaseUrl();
+    const resp = await axios.get(new URL("private/instances", url).href, {
+      headers: {
+        // Note the spaces
+        "Authorization": "Bearer     secret-token:foobar",
+      }
+    });
+    t.assertDeepEqual(resp.status, 200);
+  }
+}
+
+runMerchantInstancesTest.suites = ["merchant"];
-- 
cgit v1.2.3