82f9f88c0f
Introduced a typed Claims struct in core/auth to replace the raw map[string]any approach used for JWT claims throughout the codebase. This provides compile-time safety and better readability when creating, validating, and extracting JWT tokens. Also upgraded lestrrat-go/jwx from v2 to v3 and go-chi/jwtauth to v5.4.0, adapting all callers to the new API where token accessor methods now return tuples instead of bare values. Updated all affected handlers, middleware, and tests. Signed-off-by: Deluan <deluan@navidrome.org>
26 lines
609 B
Go
26 lines
609 B
Go
package public
|
|
|
|
import (
|
|
"github.com/go-chi/jwtauth/v5"
|
|
"github.com/navidrome/navidrome/core/auth"
|
|
. "github.com/onsi/ginkgo/v2"
|
|
. "github.com/onsi/gomega"
|
|
)
|
|
|
|
var _ = Describe("decodeArtworkID", func() {
|
|
BeforeEach(func() {
|
|
auth.TokenAuth = jwtauth.New("HS256", []byte("super secret"), nil)
|
|
})
|
|
|
|
It("fails to decode an invalid token", func() {
|
|
_, err := decodeArtworkID("xx-123")
|
|
Expect(err).To(HaveOccurred())
|
|
})
|
|
|
|
It("fails to decode a token without an id", func() {
|
|
token, _ := auth.CreatePublicToken(auth.Claims{})
|
|
_, err := decodeArtworkID(token)
|
|
Expect(err).To(HaveOccurred())
|
|
})
|
|
})
|