Testing Authenticated API Endpoints with C++

#include <gtest/gtest.h>
#include "httplib.h"

const std::string BASE_URL = "http://localhost:8000";
const std::string API_KEY = "123e4567-e89b-12d3-a456-426614174000";

class TestAPIKeyAuthentication : public ::testing::Test {
protected:
    httplib::Client cli{BASE_URL.c_str()};
};

TEST_F(TestAPIKeyAuthentication, APIKeyAuthentication) {
    // Arrange
    httplib::Headers headers = {{"X-API-Key", API_KEY}};

    // Act
    auto res = cli.Get("/todos", headers);

    // Assert
    ASSERT_EQ(res->status, 200);
}

#include <gtest/gtest.h>
#include "httplib.h"
#include <nlohmann/json.hpp>

const std::string BASE_URL = "http://localhost:8000";

class TestSessionAuthentication : public ::testing::Test {
protected:
    httplib::Client cli{BASE_URL.c_str()};

    nlohmann::json auth_details() {
        // Arrange - Providing user credentials
        return {
            {"username", "testuser"},
            {"password", "testpass123"}
        };
    }

    httplib::Result login(httplib::Client& session, const nlohmann::json& auth_details) {
        // Sends a login request and maintains session state
        return session.Post("/auth/login", auth_details.dump(), "application/json");
    }
};

TEST_F(TestSessionAuthentication, Login) {
    // Arrange - Initialize session
    httplib::Client session(BASE_URL.c_str());

    // Act - Execute the login process using the helper method
    auto login_response = login(session, auth_details());

    // Assert - Verify that the login was successful
    ASSERT_EQ(login_response->status, 200);
}

TEST_F(TestSessionAuthentication, AccessWithSession) {
    // Arrange - Use the login helper method to authenticate
    httplib::Client session(BASE_URL.c_str());
    login(session, auth_details());

    // Act - Request the protected resource using the session
    auto response = session.Get("/todos");

    // Assert - Confirm access is granted with a successful status code
    ASSERT_EQ(response->status, 200);
}

TEST_F(TestSessionAuthentication, LogoutWithSession) {
    // Arrange - Use the login helper method to authenticate
    httplib::Client session(BASE_URL.c_str());
    login(session, auth_details());

    // Act - Perform a logout operation to terminate the session
    auto logout_response = session.Post("/auth/logout");

    // Assert - Verify logout success via status code
    ASSERT_EQ(logout_response->status, 200);
}

#include <gtest/gtest.h>
#include "httplib.h"
#include <nlohmann/json.hpp>

const std::string BASE_URL = "http://localhost:8000";

class TestJWTAuthentication : public ::testing::Test {
protected:
    httplib::Client cli{BASE_URL.c_str()};

    nlohmann::json auth_details() {
        // Arrange - User credentials for JWT
        return {
            {"username", "testuser"},
            {"password", "testpass123"}
        };
    }

    httplib::Result login(const nlohmann::json& auth_details) {
        // Obtain JWT tokens with login request
        return cli.Post("/auth/login", auth_details.dump(), "application/json");
    }
};

TEST_F(TestJWTAuthentication, Login) {
    // Act - Authenticate and retrieve JWT tokens
    auto login_response = login(auth_details());

    // Assert - Confirm receipt of tokens and check their existence
    ASSERT_EQ(login_response->status, 200);
    auto tokens = nlohmann::json::parse(login_response->body);
    ASSERT_TRUE(tokens.contains("access_token"));
    ASSERT_TRUE(tokens.contains("refresh_token"));
}

TEST_F(TestJWTAuthentication, AccessWithJWT) {
    // Arrange - Authenticate and obtain an access token using the helper method
    auto login_response = login(auth_details());
    auto tokens = nlohmann::json::parse(login_response->body);
    std::string access_token = tokens["access_token"];

    // Act - Use the access token to request a protected endpoint
    httplib::Headers headers = {{"Authorization", "Bearer " + access_token}};
    auto response = cli.Get("/todos", headers);

    // Assert - Confirm the request was successful by checking the status code
    ASSERT_EQ(response->status, 200);
}

TEST_F(TestJWTAuthentication, JWTLogout) {
    // Arrange - Authenticate and prepare tokens using the helper method
    auto login_response = login(auth_details());
    auto tokens = nlohmann::json::parse(login_response->body);
    std::string access_token = tokens["access_token"];
    std::string refresh_token = tokens["refresh_token"];

    httplib::Headers headers = {{"Authorization", "Bearer " + access_token}};

    // Act - Use access and refresh tokens to process logout
    auto logout_response = cli.Post("/auth/logout", headers, nlohmann::json{{"refresh_token", refresh_token}}.dump(), "application/json");

    // Assert - Verify logout success through confirmation of status code
    ASSERT_EQ(logout_response->status, 200);
}