t/010_core/param_methods.t

use strict;
use warnings;

use Test::More tests => 134;

use OAuth::Lite2::ParamMethods qw(AUTH_HEADER FORM_BODY URI_QUERY);
use Try::Tiny;
use Plack::Request;
use IO::String;

my ($auth, $body, $query, $unknown);

TEST_BUILDER_FACTORY: {

    $auth = OAuth::Lite2::ParamMethods->get_request_builder(AUTH_HEADER);
    isa_ok($auth, "OAuth::Lite2::ParamMethod::AuthHeader");

    $body = OAuth::Lite2::ParamMethods->get_request_builder(FORM_BODY);
    isa_ok($body, "OAuth::Lite2::ParamMethod::FormEncodedBody");

    $query = OAuth::Lite2::ParamMethods->get_request_builder(URI_QUERY);
    isa_ok($query, "OAuth::Lite2::ParamMethod::URIQueryParameter");

    $unknown = OAuth::Lite2::ParamMethods->get_request_builder(10);
    ok(!$unknown);

};

TEST_AUTH_HEADER: {

    # ==============================
    # GET/DELETE (no content method)
    # ==============================
    # Without OAuth Params
    my ($req, $p_req, $p, $token, $params);
    $req= $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {},
    );
    is($req->uri, q{http://example.org/resource});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{GET});
    ok(!$req->content);

    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        HTTP_AUTHORIZATION => $req->header("Authorization"),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::AuthHeader");
    ok(!$p->is_legacy($p_req));
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");

    # legacy request
    $req->header(Authorization => q{OAuth access_token_value});
    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        HTTP_AUTHORIZATION => $req->header("Authorization"),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::AuthHeader");
    ok($p->is_legacy($p_req));
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");

    # With OAuth Params
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {
            nonce     => q{s8djwd},
            timestamp => q{137131200},
            algorithm => q{hmac-sha256},
            signature => q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=},
        },
    );
    is($req->uri, q{http://example.org/resource});
    is($req->header("Authorization"), q{Bearer access_token_value, algorithm="hmac-sha256", nonce="s8djwd", signature="wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D", timestamp="137131200"});
    is(uc $req->method, q{GET});
    ok(!$req->content);

    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        HTTP_AUTHORIZATION => $req->header("Authorization"),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::AuthHeader");
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");
    is($params->{nonce}, q{s8djwd});
    is($params->{timestamp}, q{137131200});
    is($params->{algorithm}, q{hmac-sha256});
    is($params->{signature}, q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=});

    # With Extra Params
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {},
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?buz=hoge&foo=bar});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{GET});
    ok(!$req->content);

    $p_req = Plack::Request->new({
        REQUEST_URI        => q{http://example.org/resource},
        REQUEST_METHOD     => $req->method,
        HTTP_AUTHORIZATION => $req->header("Authorization"),
        QUERY_STRING       => q{buz=hoge&foo=bar},
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::AuthHeader");
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");
    ok(!$params->{nonce});
    ok(!$params->{timestamp});
    ok(!$params->{algorithm});
    ok(!$params->{signature});

    # 'content' should be ignored
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {},
        content      => q{content!},
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?buz=hoge&foo=bar});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{GET});
    ok(!$req->content);

    # ==============================
    # POST/PUT (content method)
    # ==============================
    # With Extra Params
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {},
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/x-www-form-urlencoded});
    is($req->content, q{buz=hoge&foo=bar});

    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        HTTP_AUTHORIZATION => $req->header("Authorization"),
        CONTENT_TYPE       => $req->header("Content-Type"),
        CONTENT_LENGTH     => $req->header("Content-Length"),
        'psgi.input'       => IO::String->new($req->content),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::AuthHeader");
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");
    ok(!$params->{nonce});
    ok(!$params->{timestamp});
    ok(!$params->{algorithm});
    ok(!$params->{signature});

    # With Extra Params And Content
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {},
        content      => q{<content>value</content>},
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/x-www-form-urlencoded});
    is($req->content, q{buz=hoge&foo=bar});

    # With Extra Params, Content and Content-Type which is not form-urlencoded
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        headers      => [ 'Content-Type' => 'application/xml' ],
        oauth_params => {},
        content      => q{<content>value</content>},
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/xml});
    is($req->content, q{<content>value</content>});

    # Without both of params and content
    $req = $auth->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        headers      => [ 'Content-Type' => 'application/xml' ],
        oauth_params => {},
    );
    is($req->uri, q{http://example.org/resource});
    is($req->header("Authorization"), q{Bearer access_token_value});
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/xml});
    is($req->content, q{});

#    my $p_req = Plack::Request->new;
#    my ($token, $params) = $auth->parse($p_req);

};
#

TEST_FORM_BODY: {

    # ==============================
    # GET/DELETE (no content method)
    # ==============================
    # GET throws error

    my ($req, $p_req, $p, $token, $params);
    my $error = try {
        $body->build_request(
            url          => q{http://example.org/resource},
            method       => q{GET},
            token        => q{access_token_value},
            oauth_params => {},
        );
        return undef;
    } catch {
        return $_;
    };
    like($error, qr/FormEncodedBody/);

    # DELETE throws error
    $error = try {
        $body->build_request(
            url          => q{http://example.org/resource},
            method       => q{DELETE},
            token        => q{access_token_value},
            oauth_params => {},
        );
        return undef;
    } catch {
        return $_;
    };
    like($error, qr/FormEncodedBody/);

    # invalid content-type throws error
    $error = try {
        $body->build_request(
            url          => q{http://example.org/resource},
            method       => q{POST},
            token        => q{access_token_value},
            oauth_params => {},
            headers      => [ "Content-Type" => "application/xml" ],
            content      => q{<content>value</content>},
        );
        return undef;
    } catch {
        return $_;
    };
    like($error, qr/FormEncodedBody/);

    # Content should be ignored
    $req = $body->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {},
        content      => q{<content>value</content>},
        params       => { foo => 'bar', buz => 'hoge' },
    );

    is($req->uri, q{http://example.org/resource});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/x-www-form-urlencoded});
    is($req->content, q{access_token=access_token_value&buz=hoge&foo=bar});

    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        CONTENT_TYPE       => $req->header("Content-Type"),
        CONTENT_LENGTH     => $req->header("Content-Length"),
        'psgi.input'       => IO::String->new($req->content),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::FormEncodedBody");
    ok(!$p->is_legacy($p_req));
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");
    ok(!$params->{nonce});
    ok(!$params->{timestamp});
    ok(!$params->{algorithm});
    ok(!$params->{signature});

    # legacy request
    $req->content(q{oauth_token=access_token_value&buz=hoge&foo=bar});
    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        CONTENT_TYPE       => $req->header("Content-Type"),
        CONTENT_LENGTH     => $req->header("Content-Length") - 1,
        'psgi.input'       => IO::String->new($req->content),
    });
    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::FormEncodedBody");
    ok($p->is_legacy($p_req));
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");

    # With OAuth Params
    $req = $body->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {
            nonce     => q{s8djwd},
            timestamp => q{137131200},
            algorithm => q{hmac-sha256},
            signature => q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=},
        },
        content      => q{<content>value</content>},
        params       => { foo => 'bar', buz => 'hoge' },
    );

    is($req->uri, q{http://example.org/resource});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/x-www-form-urlencoded});
    is($req->content, q{access_token=access_token_value&algorithm=hmac-sha256&buz=hoge&foo=bar&nonce=s8djwd&signature=wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D&timestamp=137131200});

    $p_req = Plack::Request->new({
        REQUEST_URI        => $req->uri,
        REQUEST_METHOD     => $req->method,
        CONTENT_TYPE       => $req->header("Content-Type"),
        CONTENT_LENGTH     => $req->header("Content-Length"),
        'psgi.input'       => IO::String->new($req->content),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::FormEncodedBody");
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");
    is($params->{nonce}, q{s8djwd});
    is($params->{timestamp}, q{137131200});
    is($params->{algorithm}, q{hmac-sha256});
    is($params->{signature}, q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=});
};

TEST_URI_QUERY: {
    my ($req, $p_req, $p, $token, $params);
    # ==============================
    # GET/DELETE (no content method)
    # ==============================
    # Without OAuth Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {},
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{GET});
    ok(!$req->content);

    $p_req = Plack::Request->new({
        REQUEST_URI        => q{http://example.org/resource},
        REQUEST_METHOD     => $req->method,
        QUERY_STRING       => q{access_token=access_token_value},
        #CONTENT_TYPE       => $req->header("Content-Type"),
        #CONTENT_LENGTH     => $req->header("Content-Length"),
        #'psgi.input'       => IO::String->new($req->content),
    });

    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::URIQueryParameter");
    ok(!$p->is_legacy($p_req));
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");
    ok(!$params->{nonce});
    ok(!$params->{timestamp});
    ok(!$params->{algorithm});
    ok(!$params->{signature});

    # legacy request
    $p_req = Plack::Request->new({
        REQUEST_URI        => q{http://example.org/resource},
        REQUEST_METHOD     => q{GET},
        QUERY_STRING       => q{oauth_token=access_token_value},
        #CONTENT_TYPE       => $req->header("Content-Type"),
        #CONTENT_LENGTH     => $req->header("Content-Length"),
        #'psgi.input'       => IO::String->new($req->content),
    });
    $p = OAuth::Lite2::ParamMethods->get_param_parser($p_req);
    isa_ok($p, "OAuth::Lite2::ParamMethod::URIQueryParameter");
    ok($p->is_legacy($p_req));
    ($token, $params) = $p->parse($p_req);
    is($token, "access_token_value");

    # With OAuth Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {
            nonce     => q{s8djwd},
            timestamp => q{137131200},
            algorithm => q{hmac-sha256},
            signature => q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=},
        },
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value&algorithm=hmac-sha256&nonce=s8djwd&signature=wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D&timestamp=137131200});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{GET});
    ok(!$req->content);

    # With Extra Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {},
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value&buz=hoge&foo=bar});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{GET});
    ok(!$req->content);

    # With Both Extra Params And OAuth Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{GET},
        token        => q{access_token_value},
        oauth_params => {
            nonce     => q{s8djwd},
            timestamp => q{137131200},
            algorithm => q{hmac-sha256},
            signature => q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=},
        },
        params       => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value&algorithm=hmac-sha256&buz=hoge&foo=bar&nonce=s8djwd&signature=wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D&timestamp=137131200});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{GET});
    ok(!$req->content);

    # Post Body Without OAuth Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {},
        params => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/x-www-form-urlencoded});
    is($req->content, q{buz=hoge&foo=bar});

    # Post Body With OAuth Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {
            nonce     => q{s8djwd},
            timestamp => q{137131200},
            algorithm => q{hmac-sha256},
            signature => q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=},
        },
        params => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value&algorithm=hmac-sha256&nonce=s8djwd&signature=wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D&timestamp=137131200});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/x-www-form-urlencoded});
    is($req->content, q{buz=hoge&foo=bar});

    # Post Body With OAuth Params
    $req = $query->build_request(
        url          => q{http://example.org/resource},
        method       => q{POST},
        token        => q{access_token_value},
        oauth_params => {
            nonce     => q{s8djwd},
            timestamp => q{137131200},
            algorithm => q{hmac-sha256},
            signature => q{wOJIO9A2W5mFwDgiDvZbTSMK/PY=},
        },
        headers      => [ "Content-Type" => "application/xml" ],
        content      => q{<content>value</content>},
        params => {
            foo => 'bar',
            buz => 'hoge',
        },
    );
    is($req->uri, q{http://example.org/resource?access_token=access_token_value&algorithm=hmac-sha256&nonce=s8djwd&signature=wOJIO9A2W5mFwDgiDvZbTSMK%2FPY%3D&timestamp=137131200});
    ok(!$req->header("Authorization"));
    is(uc $req->method, q{POST});
    is($req->header("Content-Type"), q{application/xml});
    is($req->content, q{<content>value</content>});

};
	Global
`s`	Focus search bar
`?`	Bring up this help dialog
	GitHub
`g` `p`	Go to pull requests
`g` `i`	go to github issues (only if github is preferred repository)
	POD
`g` `a`	Go to author
`g` `c`	Go to changes
`g` `i`	Go to issues
`g` `d`	Go to dist
`g` `r`	Go to repository/SCM
`g` `s`	Go to source
`g` `b`	Go to file browse
	Search terms
module: (e.g. module:Plugin)
distribution: (e.g. distribution:Dancer auth)
author: (e.g. author:SONGMU Redis)
version: (e.g. version:1.00)