代码之家  ›  专栏  ›  技术社区  ›  Patrice Cote

单元测试授权处理程序

  •  5
  • Patrice Cote  · 技术社区  · 7 年前

    如前所述,我在.NET核心2.1中使用了基于资源的授权模式。 here . 唯一的问题是我不知道如何测试 AuthorizationHandler 干净。

    这里有人已经做过类似的事情了吗?

    授权处理程序 示例(来自上面的链接):

    public class DocumentAuthorizationHandler : 
        AuthorizationHandler<SameAuthorRequirement, Document>
    {
        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context,
                                                       SameAuthorRequirement requirement,
                                                       Document resource)
        {
            if (context.User.Identity?.Name == resource.Author)
            {
                context.Succeed(requirement);
            }
    
            return Task.CompletedTask;
        }
    }
    
    public class SameAuthorRequirement : IAuthorizationRequirement { }
    
    1 回复  |  直到 6 年前
        1
  •  6
  •   Nkosi    7 年前

    所有必需的依赖项都可用于独立的单元测试。

    所需的试验方法 HandleRequirementAsync 可通过 Task HandleAsync(AuthorizationHandlerContext context)

    /// <summary>
    /// Makes a decision if authorization is allowed.
    /// </summary>
    /// <param name="context">The authorization context.</param>
    public virtual async Task HandleAsync(AuthorizationHandlerContext context)
    {
        if (context.Resource is TResource)
        {
            foreach (var req in context.Requirements.OfType<TRequirement>())
            {
                await HandleRequirementAsync(context, req, (TResource)context.Resource);
            }
        }
    }
    

    而那个成员只依赖于 AuthorizationHandlerContext 它有一个构造器,如下所示

    public AuthorizationHandlerContext(
        IEnumerable<IAuthorizationRequirement> requirements,
        ClaimsPrincipal user,
        object resource) {
    
        //... omitted for brevity
    }
    

    Source

    简单的独立单元测试,用于验证 DocumentAuthorizationHandler .

    public async Task DocumentAuthorizationHandler_Should_Succeed() {
        //Arrange    
        var requirements = new [] { new SameAuthorRequirement()};
        var author = "author";
        var user = new ClaimsPrincipal(
                    new ClaimsIdentity(
                        new Claim[] {
                            new Claim(ClaimsIdentity.DefaultNameClaimType, author),
                        },
                        "Basic")
                    );
        var resource = new Document {
            Author = author
        };
        var context = new AuthorizationHandlerContext(requirements, user, resource);
        var subject = new DocumentAuthorizationHandler();
    
        //Act
        await subject.HandleAsync(context);
    
        //Assert
        context.HasSucceeded.Should().BeTrue(); //FluentAssertions
    }