/* Copyright The ORAS Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package auth import ( "reflect" "testing" ) func Test_parseChallenge(t *testing.T) { tests := []struct { name string header string wantScheme Scheme wantParams map[string]string }{ { name: "empty header", }, { name: "unknown scheme", header: "foo bar", wantScheme: SchemeUnknown, }, { name: "basic challenge", header: `Basic realm="Test Registry"`, wantScheme: SchemeBasic, }, { name: "basic challenge with no parameters", header: "Basic", wantScheme: SchemeBasic, }, { name: "basic challenge with no parameters but spaces", header: "Basic ", wantScheme: SchemeBasic, }, { name: "bearer challenge", header: `Bearer realm="https://auth.example.io/token",service="registry.example.io",scope="repository:library/hello-world:pull,push"`, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", "service": "registry.example.io", "scope": "repository:library/hello-world:pull,push", }, }, { name: "bearer challenge with multiple scopes", header: `Bearer realm="https://auth.example.io/token",service="registry.example.io",scope="repository:library/alpine:pull,push repository:ubuntu:pull"`, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", "service": "registry.example.io", "scope": "repository:library/alpine:pull,push repository:ubuntu:pull", }, }, { name: "bearer challenge with no parameters", header: "Bearer", wantScheme: SchemeBearer, }, { name: "bearer challenge with no parameters but spaces", header: "Bearer ", wantScheme: SchemeBearer, }, { name: "bearer challenge with white spaces", header: `Bearer realm = "https://auth.example.io/token" ,service=registry.example.io, scope ="repository:library/hello-world:pull,push" `, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", "service": "registry.example.io", "scope": "repository:library/hello-world:pull,push", }, }, { name: "bad bearer challenge (incomplete parameter with spaces)", header: `Bearer realm="https://auth.example.io/token",service`, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", }, }, { name: "bad bearer challenge (incomplete parameter with no value)", header: `Bearer realm="https://auth.example.io/token",service=`, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", }, }, { name: "bad bearer challenge (incomplete parameter with spaces)", header: `Bearer realm="https://auth.example.io/token",service= `, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", }, }, { name: "bad bearer challenge (incomplete quote)", header: `Bearer realm="https://auth.example.io/token",service="registry`, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", }, }, { name: "bearer challenge with empty parameter value", header: `Bearer realm="https://auth.example.io/token",empty="",service="registry.example.io",scope="repository:library/hello-world:pull,push"`, wantScheme: SchemeBearer, wantParams: map[string]string{ "realm": "https://auth.example.io/token", "empty": "", "service": "registry.example.io", "scope": "repository:library/hello-world:pull,push", }, }, { name: "bearer challenge with escaping parameter value", header: `Bearer foo="foo\"bar",hello="\"hello world\""`, wantScheme: SchemeBearer, wantParams: map[string]string{ "foo": `foo"bar`, "hello": `"hello world"`, }, }, } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { gotScheme, gotParams := parseChallenge(tt.header) if gotScheme != tt.wantScheme { t.Errorf("parseChallenge() gotScheme = %v, want %v", gotScheme, tt.wantScheme) } if !reflect.DeepEqual(gotParams, tt.wantParams) { t.Errorf("parseChallenge() gotParams = %v, want %v", gotParams, tt.wantParams) } }) } }