package users
import (
"net/http"
"net/http/httptest"
"testing"
"time"
portainer "github.com/portainer/portainer/api"
"github.com/portainer/portainer/api/apikey"
"github.com/portainer/portainer/api/datastore"
"github.com/portainer/portainer/api/http/security"
"github.com/portainer/portainer/api/jwt"
"github.com/stretchr/testify/assert"
)
func Test_updateUserRemovesAccessTokens(t *testing.T) {
is := assert.New(t)
_, store, teardown := datastore.MustNewTestStore(true)
defer teardown()
// create standard user
user := &portainer.User{ID: 2, Username: "standard", Role: portainer.StandardUserRole}
err := store.User().Create(user)
is.NoError(err, "error creating user")
// setup services
jwtService, err := jwt.NewService("1h", store)
is.NoError(err, "Error initiating jwt service")
apiKeyService := apikey.NewAPIKeyService(store.APIKeyRepository(), store.User())
requestBouncer := security.NewRequestBouncer(store, jwtService, apiKeyService)
rateLimiter := security.NewRateLimiter(10, 1*time.Second, 1*time.Hour)
h := NewHandler(requestBouncer, rateLimiter, apiKeyService)
h.DataStore = store
t.Run("standard user deletion removes all associated access tokens", func(t *testing.T) {
_, _, err := apiKeyService.GenerateApiKey(*user, "test-user-token")
is.NoError(err)
keys, err := apiKeyService.GetAPIKeys(user.ID)
is.Len(keys, 1)
rr := httptest.NewRecorder()
h.deleteUser(rr, user)
is.Equal(http.StatusNoContent, rr.Code)
keys, err = apiKeyService.GetAPIKeys(user.ID)
is.Equal(0, len(keys))
})
}