mutaimwiti

/**
 * Instructions
 *
 * 1. mkdir test
 * 2. cd test
 * 3. npm init
 * 4. accept all defaults is fine
 * 5. npm install @akanass/rx-http-request
 * 6. paste code below into new file index.js
 * 7. update username, password, other variables

mutaimwiti

const pw = require('playwright');

(async () => {
    const browser = await pw.chromium.launch();
    const context = await browser.newContext();

    // set addInitScript to run this on every page load in this context
    // in the app, use window.IS_PLAYWRIGHT to set window.store = store;
    await context.addInitScript('window.IS_PLAYWRIGHT = true;')

mutaimwiti

First of all, please note that token expiration and revoking are two different things.

1. Expiration only happens for web apps, not for native mobile apps, because native apps never expire.
2. Revoking only happens when (1) uses click the logout button on the website or native Apps;(2) users reset their passwords; (3) users revoke their tokens explicitly in the administration panel.

1. How to hadle JWT expiration

A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data.

Quoted from JWT RFC:

mutaimwiti

// test/testUtils/app.js

import supertest from 'supertest';
import appDef from '../../src/app';

const { generateAuthToken } = require('../../src/utils');
const { User } = require('../../src/models');

class App {
  constructor() {

mutaimwiti

// test/testUtils/app.js

var supertest = require('supertest');
var appDef = require('../../src/app');

var User = require('../../src/models').User;
var generateAuthToken = require('../../src/utils').generateAuthToken;

var app = {
  client: supertest(appDef),

mutaimwiti

// test/article.spec.js
var app = require('./testUtils/app');

describe('Articles', function() {
  describe('GET', function() {
    it('should not allow unauthenticated users to list all articles', function(done) {
      app.get('/articles').expect(401, done);
    });

    it('should allow authenticated users to list all articles', function(done) {

mutaimwiti

// test/article.spec.js

import app from './testUtils/app';

describe('Articles', () => {
  describe('GET', () => {
    it('should not allow unauthenticated users to list all articles', async () => {
      const res = await app.get('/articles');

      expect(res.status).toBe(401);

mutaimwiti

const request = require('supertest');

const request = supertest(app);

describe('Articles', function () {
    it('should allow users to list all articles', function (done) {
        request
            .get('/articles')
            .set('authorization', generateAuthToken())
            .expect(200, done)

mutaimwiti

const request = require('supertest');

describe('Articles', function () {
    it('should allow users to list all articles', function (done) {
        request(app).get('/articles').expect(200, done)
    });

    it('should allow users to get one article', function (done) {
        request(app).get('/articles/2').expect(200, done)
    });

mutaimwiti

const request = require('supertest');

const request = supertest(app);

describe('Articles', function () {
    it('should allow users to list all articles', function (done) {
        request.get('/articles').expect(200, done)
    });

    it('should allow users to get one article', function (done) {