@@ -11372,11 +11372,17 @@ func TestWebAPIChangeUserPwdMock(t *testing.T) {
1137211372 assert.NoError(t, err)
1137311373 token, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)
1137411374 assert.NoError(t, err)
11375- // invalid json
11376- req, err := http.NewRequest(http.MethodPut, userPwdPath, bytes.NewBuffer([]byte("{")) )
11375+
11376+ req, err := http.NewRequest(http.MethodGet, userProfilePath, nil )
1137711377 assert.NoError(t, err)
1137811378 setBearerForReq(req, token)
1137911379 rr := executeRequest(req)
11380+ checkResponseCode(t, http.StatusOK, rr)
11381+ // invalid json
11382+ req, err = http.NewRequest(http.MethodPut, userPwdPath, bytes.NewBuffer([]byte("{")))
11383+ assert.NoError(t, err)
11384+ setBearerForReq(req, token)
11385+ rr = executeRequest(req)
1138011386 checkResponseCode(t, http.StatusBadRequest, rr)
1138111387
1138211388 pwd := make(map[string]string)
@@ -11399,6 +11405,13 @@ func TestWebAPIChangeUserPwdMock(t *testing.T) {
1139911405 setBearerForReq(req, token)
1140011406 rr = executeRequest(req)
1140111407 checkResponseCode(t, http.StatusOK, rr)
11408+
11409+ req, err = http.NewRequest(http.MethodGet, userProfilePath, nil)
11410+ assert.NoError(t, err)
11411+ setBearerForReq(req, token)
11412+ rr = executeRequest(req)
11413+ checkResponseCode(t, http.StatusUnauthorized, rr)
11414+
1140211415 _, err = getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)
1140311416 assert.Error(t, err)
1140411417 token, err = getJWTAPIUserTokenFromTestServer(defaultUsername, altAdminPassword)
@@ -11548,6 +11561,12 @@ func TestChangeAdminPwdMock(t *testing.T) {
1154811561 setBearerForReq(req, altToken)
1154911562 rr = executeRequest(req)
1155011563 checkResponseCode(t, http.StatusOK, rr)
11564+ // try using the old token
11565+ req, err = http.NewRequest(http.MethodGet, versionPath, nil)
11566+ assert.NoError(t, err)
11567+ setBearerForReq(req, altToken)
11568+ rr = executeRequest(req)
11569+ checkResponseCode(t, http.StatusUnauthorized, rr)
1155111570
1155211571 _, err = getJWTAPITokenFromTestServer(altAdminUsername, altAdminPassword)
1155311572 assert.Error(t, err)
@@ -13599,6 +13618,13 @@ func TestWebClientChangePwd(t *testing.T) {
1359913618 checkResponseCode(t, http.StatusFound, rr)
1360013619 assert.Equal(t, webClientLoginPath, rr.Header().Get("Location"))
1360113620
13621+ req, err = http.NewRequest(http.MethodGet, webClientPingPath, nil)
13622+ assert.NoError(t, err)
13623+ req.RemoteAddr = defaultRemoteAddr
13624+ setJWTCookieForReq(req, webToken)
13625+ rr = executeRequest(req)
13626+ checkResponseCode(t, http.StatusFound, rr)
13627+
1360213628 _, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)
1360313629 assert.Error(t, err)
1360413630 _, err = getJWTWebClientTokenFromTestServer(defaultUsername+"1", defaultPassword+"1")
@@ -18850,6 +18876,12 @@ func TestWebAdminLoginMock(t *testing.T) {
1885018876 cookie := rr.Header().Get("Cookie")
1885118877 assert.Empty(t, cookie)
1885218878
18879+ req, _ = http.NewRequest(http.MethodGet, webStatusPath, nil)
18880+ req.RemoteAddr = defaultRemoteAddr
18881+ setJWTCookieForReq(req, webToken)
18882+ rr = executeRequest(req)
18883+ checkResponseCode(t, http.StatusFound, rr)
18884+
1885318885 req, _ = http.NewRequest(http.MethodGet, logoutPath, nil)
1885418886 setBearerForReq(req, apiToken)
1885518887 rr = executeRequest(req)
0 commit comments