Laravel Passport - Feature test returns unauthorized 401

倾然丶 夕夏残阳落幕 提交于 2021-01-28 03:06:00

问题


I'm trying to test my login endpoint where a successful response would return the access_token among other things.

I'm using RefreshDatabase, so I changed the login method on the controller to retrieve the client_secret via a DB call. I tested with a dd() and I can confirm that the client_secret changes on each phpunit run in the terminal. The credentials are correct and the API endpoint works - just not when it's run via a test. For example, I have the passport tables set up on my mysql server and I can login successfully when running Postman. It's only when trying to run a test do I get a 401 error.

Here is my AuthTest

<?php

namespace Tests\Feature;

use Illuminate\Foundation\Testing\RefreshDatabase;
use Illuminate\Foundation\Testing\WithFaker;
use Tests\TestCase;

class AuthTest extends TestCase
{
    use RefreshDatabase;



    /**
     * @test
     */
    public function a_user_receives_an_access_token()
    {

         \Artisan::call('passport:install');

        $user = factory('App\User')->create();

        $response = $this->json('POST', '/api/login', [
            'username' => $user->email,
            'password' => 'password'
        ]);



        $response
            ->assertJson([
                'access_token' => true
            ]);


    }
}

routes/api.php

Route::post('login', 'AuthController@login');

AuthController@login:

    public function login(Request $request) {
        $http = new \GuzzleHttp\Client;

        try {
            $response = $http->post(config('services.passport.login_endpoint'), [
                'form_params' => [
                    'grant_type' => 'password',
                    'client_id' =>  '2', //config('services.passport.client_id')
                    'client_secret' => DB::table('oauth_clients')->where('id', 2)->pluck('secret')[0], //config('services.passport.client_secret'),
                    'username' => $request->username,
                    'password' => $request->password
                ]
            ]);

            return $response->getBody();

        } catch (\GuzzleHttp\Exception\BadResponseException $e) {



            if ($e->getCode() == 400 || $e->getCode() == 401) {
                return response()
                ->json([
                    'status' => $e->getCode(),
                    'message' => 'Your email and/or password are incorrect',
                    'expanded' => $e->getMessage()
                ]);
            }

            return response()
                ->json([
                    'status' => $e->getCode(),
                    'message' => $e->getMessage()
                ]);
        }

    }

I took a look at this question and the accepted answer: How to test authentication via API with Laravel Passport?

I am unable to use the following

public function setUp() {
    parent::setUp();
    \Artisan::call('migrate',['-vvv' => true]);
    \Artisan::call('passport:install',['-vvv' => true]);
    \Artisan::call('db:seed',['-vvv' => true]);
}

This results in an error:

PHP Fatal error: Declaration of Tests\Feature\AuthTest::setUp() must be compatible with Illuminate\Foundation\Testing\TestCase::setUp()

Edit: I just added

    public function setUp() :void {
        parent::setUp();
        \Artisan::call('migrate',['-vvv' => true]);
        \Artisan::call('passport:install',['-vvv' => true]);
        \Artisan::call('db:seed',['-vvv' => true]);
    }

but the problem still persists

Edit again:

If I test the oauth route directly, it passes.

    public function testOauthLogin() {
        $oauth_client_id = 2;
        $oauth_client = OAuthClient::findOrFail($oauth_client_id);

        $user = factory('App\User')->create();

        $body = [
            'username' => $user->email,
            'password' => 'password',
            'client_id' => $oauth_client_id,
            'client_secret' => $oauth_client->secret,
            'grant_type' => 'password',
            'scope' => '*'
        ];
        $this->json('POST','/oauth/token',$body,['Accept' => 'application/json'])
            ->assertStatus(200)
            ->assertJsonStructure(['token_type','expires_in','access_token','refresh_token']);
    }

But my custom endpoint that uses guzzle fails. I do not know why

Edit again:

I think the issue is with Guzzle, but I'm not sure. I found another implementation of what I'm trying to do, which is the following:

 public function login(Request $request) {
        $request->request->add([
            'username' => $request->username,
            'password' => $request->password,
            'grant_type' => 'password',
            'client_id' => $this->client->id,
            'client_secret' => $this->client->secret,
            'scope' => '*'
        ]);

        $response = Route::dispatch(Request::create(
            'oauth/token',
            'POST'
        ));


    }

The above works.

来源:https://stackoverflow.com/questions/60852820/laravel-passport-feature-test-returns-unauthorized-401

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!