snapshot of https://github.com/cortezaproject/corteza.git (2024.9.x, 2026-09-18; blobs > 131072B omitted)

server/tests/system/auth_test.go

@@ -0,0 +1,56 @@
+package system
+
+import (
+	"context"
+	"net/http"
+	"testing"
+
+	"github.com/cortezaproject/corteza/server/system/service"
+	"github.com/cortezaproject/corteza/server/system/types"
+	"github.com/lestrrat-go/jwx/jwt"
+
+	"github.com/cortezaproject/corteza/server/tests/helpers"
+)
+
+func TestAuthImpersonate(t *testing.T) {
+
+	var (
+		h     = newHelper(t)
+		ctx   = context.Background()
+		user  = h.createUserWithEmail(h.randEmail())
+		input = &struct {
+			UserID uint64 `json:",string"`
+		}{
+			UserID: user.ID,
+		}
+	)
+
+	helpers.AllowMe(h, types.UserRbacResource(user.ID), "impersonate")
+
+	var res struct {
+		Response struct {
+			JWT string `json:"jwt"`
+		} `json:"response"`
+	}
+	h.apiInit().
+		Post("/auth/impersonate").
+		Header("Accept", "application/json").
+		JSON(helpers.JSON(input)).
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		End().
+		JSON(&res)
+
+	// make sure response has JWT token
+	signedToken := res.Response.JWT
+	h.a.NotEmpty(signedToken)
+
+	token, err := jwt.Parse([]byte(signedToken))
+	h.a.Nil(err)
+
+	at, err := service.DefaultStore.LookupAuthOa2tokenByAccess(ctx, token.JwtID())
+	h.a.Nil(err)
+	h.a.NotNil(at)
+	h.a.Equal(at.Access, token.JwtID())
+}