Help with unit test of Pac4jModule integration

[coreagile]

Hi there,

We are writing unit tests to make sure our secure endpoints are properly secured. We have a test that looks something like this:

            assertNotNull(token.get());
            final var ctxWithToken = new MockContext()
                    .setRequestHeader("Authorization",
                            format("Bearer %s", token.get()));
            router.get("/api/secure/username", ctxWithToken,
                    rsp -> {
                        assertEquals(MediaType.text, rsp.getContentType());
                        assertEquals(StatusCode.OK, rsp.getStatusCode());
                    });

And we have a test route:

        install(new Pac4jModule().client("/api/secure/*",
                conf -> new HeaderClient("Authorization", "Bearer ",
                        new JwtAuthenticator(getSecretSignatureConfiguration())
                        {
                            @Override
                            public Optional<Credentials> validate(final CallContext ctx, final Credentials cred) {
                                System.out.println("VALIDATE");
                                return super.validate(ctx, cred);
                            }
                        })));

        get("/username", App::getUsername);

    @Operation(summary = "Get my username",
            tags = "crunchtime-suite-api")
    private static String getUsername(Context context) {
        System.out.println(context.headerMap());
        final UserProfile user = context.getUser();
        return ofNullable(user).map(UserProfile::getId).orElseThrow(() -> new StatusCodeException(StatusCode.UNAUTHORIZED));
    }

When we run the app normally and send a request to this route, we see the word VALIDATE in stdout. However, when
we run the unit test, we don't get anything. We DO see the headers printed in the getUsername method in both cases.

Is the Pac4jModule supposed to work in a unit test context? Or should we switch to integration testing? Or is there some other setup we're missing?

Thanks!

[jknack]

Hi,

Your code looks good. The unit test support for routes won't go that deep (inside pac4j module or any other module), it basically give you access to the final handler on pipeline (your business handler). If that isn't enough you will have to go with integration tests.

[coreagile]

Ok thanks! I must not have read the documentation closely enough.