authentication.test.js

const testWithServer = require('./helpers/test-with-server');
const config = require('../config');
const JWT = require('jsonwebtoken');

const jwtSecret = config.JWT_SECRET;
config.JWT_SECRET = 'encodethejwt';

testWithServer('Authentication is ok', {}, async (t, ctx) => {
  t.plan(1);
  const token = JWT.sign({ valid: true }, config.JWT_SECRET);
  const htmlRequest = {
    method: 'GET',
    url: '/',
    headers: { cookie: 'token=' + token, Accept: 'text/html' }
  };

  const res = await ctx.server.inject(htmlRequest);

  t.equal(res.statusCode, 200, 'Status code 200 ok');
  t.end();
}, true);

testWithServer('Attempt to access a page with a wrong cookie', {}, async (t, ctx) => {
  t.plan(2);
  const token = JWT.sign({ valid: 'wrong cookie value' }, config.JWT_SECRET);
  const htmlRequest = {
    method: 'GET',
    url: '/',
    headers: { cookie: 'token=' + token, Accept: 'text/html' }
  };

  const res = await ctx.server.inject(htmlRequest);
  t.equal(res.statusCode, 302, 'Not authorized to access the page with a wrong cookie');
  t.equal(res.headers.location, '/login', 'Redirect to login page');
  config.JWT_SECRET = jwtSecret;
  t.end();
}, true);