Leonid Pershin
b2ae358250
- Introduced billing capabilities, allowing users to request payments for subscription periods (3/6/12 months) with admin approval via Telegram. - Updated role management to include a `BillingEnabled` property, preventing billing for admin roles. - Enhanced the `CreateRoleCommand` and `UpdateRoleCommand` to accept billing parameters, ensuring proper handling during role creation and updates. - Added new endpoints for billing management and integrated billing checks into VPN config creation to enforce payment requirements. - Updated related services, models, and tests to support the new billing features, ensuring comprehensive coverage and functionality. - Enhanced documentation to reflect the new billing processes and role management changes.
104 lines
3.7 KiB
C#
104 lines
3.7 KiB
C#
using NSubstitute;
|
|
using PnvPanel.Application.Auth;
|
|
using PnvPanel.Application.Auth.Refresh;
|
|
using PnvPanel.Application.Common.Interfaces;
|
|
using PnvPanel.Application.Common.Models;
|
|
using Xunit;
|
|
|
|
namespace PnvPanel.Application.Tests.Auth;
|
|
|
|
public class RefreshCommandHandlerTests
|
|
{
|
|
private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
|
|
private readonly IJwtTokenService _jwtTokenService = Substitute.For<IJwtTokenService>();
|
|
private readonly IRefreshTokenService _refreshTokenService =
|
|
Substitute.For<IRefreshTokenService>();
|
|
|
|
private RefreshCommandHandler CreateHandler() =>
|
|
new(_identityService, _jwtTokenService, _refreshTokenService);
|
|
|
|
[Fact]
|
|
public async Task Handle_WithValidToken_RotatesAndReturnsNewAuthResult()
|
|
{
|
|
var userId = Guid.NewGuid();
|
|
var profile = new CurrentUserProfile(
|
|
userId,
|
|
"alice",
|
|
Guid.NewGuid(),
|
|
"user",
|
|
IsActivated: true,
|
|
IsBlocked: false,
|
|
MaxConfigs: 3,
|
|
MaxIpLimit: RoleQuota.Unlimited,
|
|
SubscriptionToken: "sub-token",
|
|
BillingEnabled: false,
|
|
BillingPaidUntil: null,
|
|
BillingSuspended: false
|
|
);
|
|
var rotated = new RotatedRefreshToken(
|
|
userId,
|
|
"new-refresh-token",
|
|
DateTimeOffset.UtcNow.AddDays(30)
|
|
);
|
|
|
|
_refreshTokenService
|
|
.RotateAsync("old-token", Arg.Any<CancellationToken>())
|
|
.Returns(Result.Success(rotated));
|
|
_identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);
|
|
_identityService
|
|
.GetTelegramLinkInfoAsync(userId, Arg.Any<CancellationToken>())
|
|
.Returns(new TelegramLinkInfo(false, null, null));
|
|
_jwtTokenService
|
|
.GenerateAccessToken(Arg.Any<AuthenticatedUser>())
|
|
.Returns(("new-access-token", DateTimeOffset.UtcNow.AddMinutes(15)));
|
|
|
|
var result = await CreateHandler()
|
|
.Handle(new RefreshCommand("old-token"), CancellationToken.None);
|
|
|
|
Assert.True(result.IsSuccess);
|
|
Assert.Equal("new-access-token", result.Value.AccessToken);
|
|
Assert.Equal("new-refresh-token", result.Value.RefreshToken);
|
|
}
|
|
|
|
[Fact]
|
|
public async Task Handle_WithInvalidOrReusedToken_ReturnsFailure()
|
|
{
|
|
_refreshTokenService
|
|
.RotateAsync("stolen-token", Arg.Any<CancellationToken>())
|
|
.Returns(Result.Failure<RotatedRefreshToken>(AuthErrors.InvalidRefreshToken));
|
|
|
|
var result = await CreateHandler()
|
|
.Handle(new RefreshCommand("stolen-token"), CancellationToken.None);
|
|
|
|
Assert.False(result.IsSuccess);
|
|
Assert.Equal(AuthErrors.InvalidRefreshToken, result.Error);
|
|
await _identityService
|
|
.DidNotReceive()
|
|
.GetProfileAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
|
|
}
|
|
|
|
[Fact]
|
|
public async Task Handle_WhenProfileNoLongerExists_ReturnsInvalidRefreshToken()
|
|
{
|
|
var userId = Guid.NewGuid();
|
|
var rotated = new RotatedRefreshToken(
|
|
userId,
|
|
"new-refresh-token",
|
|
DateTimeOffset.UtcNow.AddDays(30)
|
|
);
|
|
|
|
_refreshTokenService
|
|
.RotateAsync("old-token", Arg.Any<CancellationToken>())
|
|
.Returns(Result.Success(rotated));
|
|
_identityService
|
|
.GetProfileAsync(userId, Arg.Any<CancellationToken>())
|
|
.Returns((CurrentUserProfile?)null);
|
|
|
|
var result = await CreateHandler()
|
|
.Handle(new RefreshCommand("old-token"), CancellationToken.None);
|
|
|
|
Assert.False(result.IsSuccess);
|
|
Assert.Equal(AuthErrors.InvalidRefreshToken, result.Error);
|
|
}
|
|
}
|