[auth] Add tests for BearerAuth.tryAuthFromHeaders

Author: geropl

components/server/src/auth/bearer-authenticator.spec.db.ts

@@ -18,6 +18,7 @@ import { Request } from "express";
 import { WithResourceAccessGuard } from "./resource-access";
 import { WithFunctionAccessGuard } from "./function-access";
 import { fail } from "assert";
+import { SubjectId } from "./subject-id";
 
 function toDateTime(date: Date): string {
     return date.toISOString().replace("T", " ").replace("Z", "");
@@ -62,7 +63,7 @@ describe("BearerAuth", () => {
         testUser = await userService.createUser({
             identity: {
                 authId: "gh-user-1",
-                authName: "user",
+                authName: "testUser",
                 authProviderId: "public-github",
             },
         });
@@ -110,6 +111,35 @@ describe("BearerAuth", () => {
         await expectError(async () => bearerAuth.authExpressRequest(req), "cannot find token");
     });
 
+    it("tryAuthFromHeaders should successfully authenticate BearerToken (PAT)", async () => {
+        const pat1 = await insertPat(testUser.id, "pat-1");
+
+        const headers = {
+            authorization: `Bearer ${pat1}`,
+        };
+        const subjectId = await bearerAuth.tryAuthFromHeaders(headers);
+
+        expect(subjectId?.toString()).to.equal(SubjectId.fromUserId(testUser.id).toString());
+    });
+
+    it("tryAuthFromHeaders should return undefined with missing BearerToken in header", async () => {
+        await insertPat(testUser.id, "pat-1");
+
+        const headers = {
+            authorization: `Bearer `, // missing
+        };
+        expect(await bearerAuth.tryAuthFromHeaders(headers)).to.be.undefined;
+    });
+
+    it("tryAuthFromHeaders should fail to authenticate with missing BearerToken from DB (PAT)", async () => {
+        const patNotStored = "gitpod_pat_GrvGthczSRf3ypqFhNtcRiN5fK6CV7rdCkkPLfpbc_4";
+
+        const headers = {
+            authorization: `Bearer ${patNotStored}`,
+        };
+        await expectError(async () => bearerAuth.tryAuthFromHeaders(headers), "cannot find token");
+    });
+
     async function expectError(fun: () => Promise<any>, message: string) {
         try {
             await fun();