createos-mcp/codemode/auth_test.go at 9058117904f00a1ccf078772b6eedea661d1e763 · NodeOps-app/createos-mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
package codemode

import (
	"context"
	"testing"

	"github.com/mark3labs/mcp-go/mcp"
)

func TestAuthFromContext_APIKey(t *testing.T) {
	ctx := WithAuthHeaders(context.Background(), map[string]string{"X-Api-Key": "k1"})
	got := AuthFromContext(ctx)
	if got == nil || got.APIKey != "k1" {
		t.Fatalf("got %+v", got)
	}
}

func TestAuthFromContext_Bearer(t *testing.T) {
	ctx := WithAuthHeaders(context.Background(), map[string]string{"Authorization": "Bearer t1"})
	got := AuthFromContext(ctx)
	if got == nil || got.Bearer != "t1" {
		t.Fatalf("got %+v", got)
	}
}

func TestAuthFromContext_Both(t *testing.T) {
	ctx := WithAuthHeaders(context.Background(), map[string]string{
		"X-Api-Key":     "k1",
		"Authorization": "Bearer t1",
	})
	got := AuthFromContext(ctx)
	if got == nil || got.APIKey != "k1" || got.Bearer != "t1" {
		t.Fatalf("got %+v", got)
	}
}

func TestAuthFromContext_Missing(t *testing.T) {
	if AuthFromContext(context.Background()) != nil {
		t.Fatal("want nil")
	}
}

func TestAuthFromRequest_APIKey(t *testing.T) {
	req := mcp.CallToolRequest{}
	req.Header = map[string][]string{"X-Api-Key": {"k1"}}
	got := AuthFromRequest(context.Background(), req)
	if got == nil || got.APIKey != "k1" {
		t.Fatalf("got %+v", got)
	}
}

func TestAuthFromRequest_Bearer(t *testing.T) {
	req := mcp.CallToolRequest{}
	req.Header = map[string][]string{"Authorization": {"Bearer tok123"}}
	got := AuthFromRequest(context.Background(), req)
	if got == nil || got.Bearer != "tok123" {
		t.Fatalf("got %+v", got)
	}
}

func TestAuthFromRequest_FallsBackToEnv(t *testing.T) {
	t.Setenv("CREATEOS_API_KEY", "env-key")
	t.Setenv("CREATEOS_BEARER", "")
	req := mcp.CallToolRequest{}
	got := AuthFromRequest(context.Background(), req)
	if got == nil || got.APIKey != "env-key" {
		t.Fatalf("got %+v", got)
	}
}

func TestAuthFromEnv_None(t *testing.T) {
	t.Setenv("CREATEOS_API_KEY", "")
	t.Setenv("CREATEOS_BEARER", "")
	if AuthFromEnv() != nil {
		t.Fatal("want nil")
	}
}

func TestAuthFromRequest_FallsBackToContext(t *testing.T) {
	t.Setenv("CREATEOS_API_KEY", "")
	t.Setenv("CREATEOS_BEARER", "")
	req := mcp.CallToolRequest{}
	ctx := WithAuthHeaders(context.Background(), map[string]string{"X-Api-Key": "ctx-key"})
	got := AuthFromRequest(ctx, req)
	if got == nil || got.APIKey != "ctx-key" {
		t.Fatalf("got %+v", got)
	}
}