test_verify_token.py

from datetime import datetime, timedelta

import jwt
import pytest
from flask import Flask

from jwt_helper import JWT_SECRET_KEY, TokenError, verify_token

app = Flask(__name__)


def test_verify_valid_access_token():
    """Test verifying a valid access token."""
    access_token = jwt.encode(
        {"token_type": "access"}, JWT_SECRET_KEY, algorithm="HS256"
    )
    decoded = verify_token(access_token, "access")
    assert decoded["token_type"] == "access"


def test_verify_valid_refresh_token():
    """Test verifying a valid refresh token."""
    refresh_token = jwt.encode(
        {"token_type": "refresh"}, JWT_SECRET_KEY, algorithm="HS256"
    )
    decoded = verify_token(refresh_token, "refresh")
    assert decoded["token_type"] == "refresh"


def test_verify_token_invalid_type():
    """Test verifying a token with an incorrect type."""
    token = jwt.encode({"token_type": "invalid"}, JWT_SECRET_KEY, algorithm="HS256")
    with pytest.raises(TokenError, match="Invalid token") as excinfo:
        verify_token(token, "access")
    assert excinfo.value.status_code == 401


def test_verify_expired_token():
    """Test verifying an expired token."""
    expired_token = jwt.encode(
        {"token_type": "access", "exp": datetime.now() - timedelta(seconds=1)},
        JWT_SECRET_KEY,
        algorithm="HS256",
    )
    with pytest.raises(TokenError, match="Token has expired") as excinfo:
        verify_token(expired_token, "access")
    assert excinfo.value.status_code == 401


def test_verify_invalid_token():
    """Test verifying an invalid token."""
    with pytest.raises(TokenError, match="Invalid token") as excinfo:
        verify_token("invalid_token", "access")
    assert excinfo.value.status_code == 401