mirror of https://github.com/veypi/OneAuth.git
test: 添加集成测试脚本
新增 scripts/tests/ 目录，包含权限测试脚本： - lib.sh: 公共函数库（API请求、用户/组织操作封装） - 01_basic_auth.sh: 基础认证测试（注册、登录、改密、刷新token） - 02_user_permission.sh: 用户权限测试（admin/user角色、信息修改权限） - 03_org_permission.sh: 组织权限测试（创建组织、成员权限、修改权限） - run_all.sh: 运行所有测试 - README.md: 测试说明文档 删除旧的 test.shv3
veypi
1 week ago
parent
54bb58048e
commit
d7ee1a1f4e
@ -0,0 +1,84 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# 用户权限测试
|
||||
# 测试内容：
|
||||
# - 第一个用户注册为 admin
|
||||
# - 第二个用户注册为 user
|
||||
# - user 可以修改自己的信息
|
||||
# - user 不能修改 admin 的信息
|
||||
#
|
||||
|
||||
set -e
|
||||
|
||||
# 加载公共库
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||
source "$SCRIPT_DIR/lib.sh"
|
||||
|
||||
# 测试用户
|
||||
ADMIN_USER="admin_user_$TEST_TIMESTAMP"
|
||||
ADMIN_PASS="admin123"
|
||||
ADMIN_EMAIL="$ADMIN_USER@test.com"
|
||||
|
||||
NORMAL_USER="normal_user_$TEST_TIMESTAMP"
|
||||
NORMAL_PASS="user123"
|
||||
NORMAL_EMAIL="$NORMAL_USER@test.com"
|
||||
|
||||
test_start "用户权限测试"
|
||||
|
||||
# 检查服务
|
||||
check_service
|
||||
|
||||
# 1. 第一个用户注册 (admin)
|
||||
step "1. 第一个用户注册 (自动成为 admin)"
|
||||
ADMIN_REG=$(register_user "$ADMIN_USER" "$ADMIN_PASS" "$ADMIN_EMAIL")
|
||||
echo "Admin 注册响应: $ADMIN_REG"
|
||||
check_http_code "$ADMIN_REG" "200"
|
||||
ADMIN_LOGIN=$(login_user "$ADMIN_USER" "$ADMIN_PASS")
|
||||
ADMIN_TOKEN=$(get_token "$ADMIN_LOGIN")
|
||||
ADMIN_ID=$(get_user_id "$ADMIN_LOGIN")
|
||||
info "Admin ID: $ADMIN_ID"
|
||||
check_success "Admin 注册并登录成功"
|
||||
|
||||
# 2. 第二个用户注册 (user)
|
||||
step "2. 第二个用户注册 (普通 user)"
|
||||
USER_REG=$(register_user "$NORMAL_USER" "$NORMAL_PASS" "$NORMAL_EMAIL")
|
||||
echo "User 注册响应: $USER_REG"
|
||||
check_http_code "$USER_REG" "200"
|
||||
USER_LOGIN=$(login_user "$NORMAL_USER" "$NORMAL_PASS")
|
||||
USER_TOKEN=$(get_token "$USER_LOGIN")
|
||||
USER_ID=$(get_user_id "$USER_LOGIN")
|
||||
info "User ID: $USER_ID"
|
||||
check_success "普通用户注册并登录成功"
|
||||
|
||||
# 3. user 可以修改自己的信息
|
||||
step "3. user 可以修改自己的信息"
|
||||
USER_UPDATE=$(api_patch "/api/users/$USER_ID" '{"nickname": "My Nickname"}' "$USER_TOKEN")
|
||||
echo "修改自己响应: $USER_UPDATE"
|
||||
check_http_code "$USER_UPDATE" "200"
|
||||
check_success "user 可以修改自己的信息"
|
||||
|
||||
# 4. user 不能修改 admin 的信息
|
||||
step "4. user 不能修改 admin 的信息 (应该返回 403)"
|
||||
ADMIN_UPDATE_BY_USER=$(api_patch "/api/users/$ADMIN_ID" '{"nickname": "Hacked"}' "$USER_TOKEN") || true
|
||||
echo "尝试修改 admin 响应: $ADMIN_UPDATE_BY_USER"
|
||||
if echo "$ADMIN_UPDATE_BY_USER" | grep -q '"code":403' || echo "$ADMIN_UPDATE_BY_USER" | grep -q '"code":404'; then
|
||||
check_success "user 不能修改 admin 的信息 (权限控制生效)"
|
||||
else
|
||||
error "权限控制失效"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 5. admin 可以修改任意用户的信息
|
||||
step "5. admin 可以修改任意用户的信息"
|
||||
USER_UPDATE_BY_ADMIN=$(api_patch "/api/users/$USER_ID" '{"nickname": "Updated By Admin"}' "$ADMIN_TOKEN")
|
||||
echo "Admin 修改 user 响应: $USER_UPDATE_BY_ADMIN"
|
||||
check_http_code "$USER_UPDATE_BY_ADMIN" "200"
|
||||
NICKNAME=$(echo "$USER_UPDATE_BY_ADMIN" | jq -r '.nickname')
|
||||
if [ "$NICKNAME" == "Updated By Admin" ]; then
|
||||
check_success "admin 可以修改任意用户的信息"
|
||||
else
|
||||
error "admin 修改失败"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
test_end
|
||||
@ -0,0 +1,103 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# 组织权限测试
|
||||
# 测试内容：
|
||||
# - admin 创建组织
|
||||
# - user 不能修改他人的组织
|
||||
# - admin 邀请 user 加入组织
|
||||
# - 普通成员不能修改组织信息
|
||||
#
|
||||
|
||||
set -e
|
||||
|
||||
# 加载公共库
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||
source "$SCRIPT_DIR/lib.sh"
|
||||
|
||||
# 测试用户
|
||||
ADMIN_USER="org_admin_$TEST_TIMESTAMP"
|
||||
ADMIN_PASS="admin123"
|
||||
ADMIN_EMAIL="$ADMIN_USER@test.com"
|
||||
|
||||
NORMAL_USER="org_member_$TEST_TIMESTAMP"
|
||||
NORMAL_PASS="user123"
|
||||
NORMAL_EMAIL="$NORMAL_USER@test.com"
|
||||
|
||||
ORG_CODE="test_org_$TEST_TIMESTAMP"
|
||||
ORG_NAME="Test Organization"
|
||||
|
||||
test_start "组织权限测试"
|
||||
|
||||
# 检查服务
|
||||
check_service
|
||||
|
||||
# 1. 创建 admin 用户
|
||||
step "1. 创建 admin 用户"
|
||||
ADMIN_REG=$(register_user "$ADMIN_USER" "$ADMIN_PASS" "$ADMIN_EMAIL")
|
||||
ADMIN_LOGIN=$(login_user "$ADMIN_USER" "$ADMIN_PASS")
|
||||
ADMIN_TOKEN=$(get_token "$ADMIN_LOGIN")
|
||||
ADMIN_ID=$(get_user_id "$ADMIN_LOGIN")
|
||||
info "Admin ID: $ADMIN_ID"
|
||||
check_success "admin 用户创建成功"
|
||||
|
||||
# 2. 创建普通用户
|
||||
step "2. 创建普通用户"
|
||||
USER_REG=$(register_user "$NORMAL_USER" "$NORMAL_PASS" "$NORMAL_EMAIL")
|
||||
USER_LOGIN=$(login_user "$NORMAL_USER" "$NORMAL_PASS")
|
||||
USER_TOKEN=$(get_token "$USER_LOGIN")
|
||||
USER_ID=$(get_user_id "$USER_LOGIN")
|
||||
info "User ID: $USER_ID"
|
||||
check_success "普通用户创建成功"
|
||||
|
||||
# 3. admin 创建组织
|
||||
step "3. admin 创建组织"
|
||||
ORG_RES=$(create_org "$ADMIN_TOKEN" "$ORG_CODE" "$ORG_NAME" "Test Description")
|
||||
echo "创建组织响应: $ORG_RES"
|
||||
check_http_code "$ORG_RES" "200"
|
||||
ORG_ID=$(echo "$ORG_RES" | jq -r '.id')
|
||||
info "Org ID: $ORG_ID"
|
||||
check_success "admin 创建组织成功"
|
||||
|
||||
# 4. user 不能修改他人的组织
|
||||
step "4. user 不能修改他人的组织 (应该返回 403)"
|
||||
USER_UPDATE_ORG=$(update_org "$USER_TOKEN" "$ORG_ID" '{"name": "Hacked Name"}') || true
|
||||
echo "user 尝试修改组织响应: $USER_UPDATE_ORG"
|
||||
if echo "$USER_UPDATE_ORG" | grep -q '"code":403' || echo "$USER_UPDATE_ORG" | grep -q '"code":404'; then
|
||||
check_success "user 不能修改他人的组织 (权限控制生效)"
|
||||
else
|
||||
error "权限控制失效"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 5. admin 邀请 user 加入组织
|
||||
step "5. admin 邀请 user 加入组织 (作为普通成员)"
|
||||
ADD_MEMBER_RES=$(add_org_member "$ADMIN_TOKEN" "$ORG_ID" "$USER_ID" "member")
|
||||
echo "添加成员响应: $ADD_MEMBER_RES"
|
||||
check_http_code "$ADD_MEMBER_RES" "200"
|
||||
check_success "admin 邀请 user 加入组织成功"
|
||||
|
||||
# 6. 普通成员不能修改组织信息
|
||||
step "6. 普通成员不能修改组织信息 (应该返回 403)"
|
||||
MEMBER_UPDATE_ORG=$(update_org "$USER_TOKEN" "$ORG_ID" '{"name": "Member Hacked"}') || true
|
||||
echo "普通成员尝试修改组织响应: $MEMBER_UPDATE_ORG"
|
||||
if echo "$MEMBER_UPDATE_ORG" | grep -q '"code":403' || echo "$MEMBER_UPDATE_ORG" | grep -q '"code":404'; then
|
||||
check_success "普通成员不能修改组织 (权限控制生效)"
|
||||
else
|
||||
error "权限控制失效"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 7. admin 可以修改组织
|
||||
step "7. admin 可以修改组织"
|
||||
ADMIN_UPDATE_ORG=$(update_org "$ADMIN_TOKEN" "$ORG_ID" '{"name": "Updated By Admin"}')
|
||||
echo "admin 修改组织响应: $ADMIN_UPDATE_ORG"
|
||||
check_http_code "$ADMIN_UPDATE_ORG" "200"
|
||||
UPDATED_NAME=$(echo "$ADMIN_UPDATE_ORG" | jq -r '.name')
|
||||
if [ "$UPDATED_NAME" == "Updated By Admin" ]; then
|
||||
check_success "admin 可以修改组织"
|
||||
else
|
||||
error "admin 修改组织失败"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
test_end
|
||||
@ -0,0 +1,77 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# 运行所有测试
|
||||
#
|
||||
|
||||
set -e
|
||||
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||
cd "$SCRIPT_DIR"
|
||||
|
||||
# 颜色
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m'
|
||||
|
||||
echo "========================================"
|
||||
echo -e "${BLUE}VBase 集成测试套件${NC}"
|
||||
echo "========================================"
|
||||
echo ""
|
||||
|
||||
# 生成统一的时间戳（所有测试使用相同时间戳，避免冲突）
|
||||
export TEST_TIMESTAMP=$(date +%s)
|
||||
echo "测试时间戳: $TEST_TIMESTAMP"
|
||||
echo ""
|
||||
|
||||
# 测试脚本列表
|
||||
TESTS=(
|
||||
"01_basic_auth.sh:基础认证测试"
|
||||
"02_user_permission.sh:用户权限测试"
|
||||
"03_org_permission.sh:组织权限测试"
|
||||
)
|
||||
|
||||
PASSED=0
|
||||
FAILED=0
|
||||
|
||||
# 运行每个测试
|
||||
for test_info in "${TESTS[@]}"; do
|
||||
script="${test_info%%:*}"
|
||||
name="${test_info##*:}"
|
||||
|
||||
echo ""
|
||||
echo "========================================"
|
||||
echo -e "${YELLOW}运行: $name${NC}"
|
||||
echo "========================================"
|
||||
|
||||
if bash "$script"; then
|
||||
echo -e "${GREEN}✓ $name 通过${NC}"
|
||||
((PASSED++))
|
||||
else
|
||||
echo -e "${RED}✗ $name 失败${NC}"
|
||||
((FAILED++))
|
||||
echo ""
|
||||
echo -e "${RED}测试中止${NC}"
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
# 测试摘要
|
||||
echo ""
|
||||
echo "========================================"
|
||||
echo -e "${BLUE}测试摘要${NC}"
|
||||
echo "========================================"
|
||||
echo -e "通过: ${GREEN}$PASSED${NC}"
|
||||
echo -e "失败: ${RED}$FAILED${NC}"
|
||||
echo "总计: ${#TESTS[@]}"
|
||||
|
||||
if [ $FAILED -eq 0 ]; then
|
||||
echo ""
|
||||
echo -e "${GREEN}所有测试通过!${NC}"
|
||||
exit 0
|
||||
else
|
||||
echo ""
|
||||
echo -e "${RED}存在失败的测试${NC}"
|
||||
exit 1
|
||||
fi
|
||||
@ -1,224 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Configuration
|
||||
BASE_URL="http://localhost:4000"
|
||||
TIMESTAMP=$(date +%s)
|
||||
USERNAME="user_$TIMESTAMP"
|
||||
PASSWORD="password123"
|
||||
EMAIL="${USERNAME}@example.com"
|
||||
ORG_CODE="org_$TIMESTAMP"
|
||||
ORG_NAME="Org $TIMESTAMP"
|
||||
|
||||
echo "Testing against $BASE_URL"
|
||||
echo "User: $USERNAME"
|
||||
echo "Org: $ORG_CODE"
|
||||
|
||||
# Helper function to check for errors
|
||||
check_error() {
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "Error: $1"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
check_http_code() {
|
||||
RESPONSE=$1
|
||||
EXPECTED=$2
|
||||
|
||||
if [ -z "$RESPONSE" ] || [ "$RESPONSE" == "null" ]; then
|
||||
if [ "$EXPECTED" == "200" ]; then
|
||||
return 0
|
||||
else
|
||||
echo "Expected code $EXPECTED, got empty response"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
# Check if .code exists and is a number. If not, assume 200.
|
||||
CODE=$(echo "$RESPONSE" | jq -r 'if (.code | type) == "number" then .code else 200 end')
|
||||
|
||||
if [ "$CODE" != "$EXPECTED" ] && [ "$EXPECTED" != "200" ]; then
|
||||
echo "Expected code $EXPECTED, got $CODE"
|
||||
echo "Response: $RESPONSE"
|
||||
exit 1
|
||||
fi
|
||||
# Handle implicit 200 (when code field is missing or not a number)
|
||||
if [ "$EXPECTED" == "200" ] && [ "$CODE" != "200" ] && [ "$CODE" != "0" ]; then
|
||||
echo "Expected code 200, got $CODE"
|
||||
echo "Response: $RESPONSE"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
echo "=================================================="
|
||||
echo "1. Registering User..."
|
||||
REGISTER_RES=$(curl -s -X POST "$BASE_URL/api/auth/register" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"username\": \"$USERNAME\", \"password\": \"$PASSWORD\", \"email\": \"$EMAIL\"}")
|
||||
echo "Register Response: $REGISTER_RES"
|
||||
check_http_code "$REGISTER_RES" 200
|
||||
|
||||
echo "=================================================="
|
||||
echo "2. Logging in..."
|
||||
LOGIN_RES=$(curl -s -X POST "$BASE_URL/api/auth/login" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"username\": \"$USERNAME\", \"password\": \"$PASSWORD\"}")
|
||||
echo "Login Response: $LOGIN_RES"
|
||||
check_http_code "$LOGIN_RES" 200
|
||||
|
||||
ACCESS_TOKEN=$(echo "$LOGIN_RES" | jq -r '.access_token')
|
||||
REFRESH_TOKEN=$(echo "$LOGIN_RES" | jq -r '.refresh_token')
|
||||
|
||||
if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" == "null" ]; then
|
||||
echo "Failed to get access token"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Got Access Token"
|
||||
|
||||
echo "=================================================="
|
||||
echo "3. Get User Info (Me)..."
|
||||
ME_RES=$(curl -s -X GET "$BASE_URL/api/auth/me" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
echo "Me Response: $ME_RES"
|
||||
check_http_code "$ME_RES" 200
|
||||
USER_ID=$(echo "$ME_RES" | jq -r '.id')
|
||||
echo "User ID: $USER_ID"
|
||||
|
||||
echo "=================================================="
|
||||
echo "4. Update User Info (Patch Me)..."
|
||||
UPDATE_ME_RES=$(curl -s -X PATCH "$BASE_URL/api/auth/me" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"nickname\": \"Updated Nickname\"}")
|
||||
echo "Update Me Response: $UPDATE_ME_RES"
|
||||
check_http_code "$UPDATE_ME_RES" 200
|
||||
NEW_NICKNAME=$(echo "$UPDATE_ME_RES" | jq -r '.nickname')
|
||||
if [ "$NEW_NICKNAME" != "Updated Nickname" ]; then
|
||||
echo "Nickname update failed"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "=================================================="
|
||||
echo "5. Change Password..."
|
||||
CHANGE_PW_RES=$(curl -s -X POST "$BASE_URL/api/auth/me/change-password" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"old_password\": \"$PASSWORD\", \"new_password\": \"newpassword123\"}")
|
||||
echo "Change Password Response: $CHANGE_PW_RES"
|
||||
check_http_code "$CHANGE_PW_RES" 200
|
||||
|
||||
# Verify login with new password
|
||||
echo "Verifying new password..."
|
||||
LOGIN_NEW_RES=$(curl -s -X POST "$BASE_URL/api/auth/login" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"username\": \"$USERNAME\", \"password\": \"newpassword123\"}")
|
||||
check_http_code "$LOGIN_NEW_RES" 200
|
||||
echo "Login with new password successful"
|
||||
|
||||
# Get new token
|
||||
ACCESS_TOKEN=$(echo "$LOGIN_NEW_RES" | jq -r '.access_token')
|
||||
REFRESH_TOKEN=$(echo "$LOGIN_NEW_RES" | jq -r '.refresh_token')
|
||||
|
||||
echo "=================================================="
|
||||
echo "6. Refresh Token..."
|
||||
REFRESH_RES=$(curl -s -X POST "$BASE_URL/api/auth/refresh" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"refresh_token\": \"$REFRESH_TOKEN\"}")
|
||||
echo "Refresh Response: $REFRESH_RES"
|
||||
check_http_code "$REFRESH_RES" 200
|
||||
NEW_ACCESS_TOKEN=$(echo "$REFRESH_RES" | jq -r '.access_token')
|
||||
if [ -z "$NEW_ACCESS_TOKEN" ] || [ "$NEW_ACCESS_TOKEN" == "null" ]; then
|
||||
echo "Failed to refresh token"
|
||||
exit 1
|
||||
fi
|
||||
ACCESS_TOKEN=$NEW_ACCESS_TOKEN
|
||||
echo "Token Refreshed"
|
||||
|
||||
echo "=================================================="
|
||||
echo "7. Create Organization..."
|
||||
CREATE_ORG_RES=$(curl -s -X POST "$BASE_URL/api/orgs" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"name\": \"$ORG_NAME\", \"code\": \"$ORG_CODE\", \"description\": \"Test Description\"}")
|
||||
echo "Create Org Response: $CREATE_ORG_RES"
|
||||
check_http_code "$CREATE_ORG_RES" 200
|
||||
ORG_ID=$(echo "$CREATE_ORG_RES" | jq -r '.id')
|
||||
echo "Org ID: $ORG_ID"
|
||||
|
||||
echo "=================================================="
|
||||
echo "8. Get Organization..."
|
||||
GET_ORG_RES=$(curl -s -X GET "$BASE_URL/api/orgs/$ORG_ID" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
# Need to pass X-Org-ID or use context?
|
||||
# The get endpoint logic: Router.Get("/{org_id}", ..., setOrgID, auth.VBaseAuth.Perm("org:read"), get)
|
||||
# setOrgID sets org_id from path param.
|
||||
# Perm checks permission for that org_id.
|
||||
# User should have admin role in that org.
|
||||
echo "Get Org Response: $GET_ORG_RES"
|
||||
check_http_code "$GET_ORG_RES" 200
|
||||
|
||||
echo "=================================================="
|
||||
echo "9. Update Organization..."
|
||||
UPDATE_ORG_RES=$(curl -s -X PATCH "$BASE_URL/api/orgs/$ORG_ID" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"name\": \"${ORG_NAME}_Updated\"}")
|
||||
echo "Update Org Response: $UPDATE_ORG_RES"
|
||||
check_http_code "$UPDATE_ORG_RES" 200
|
||||
UPDATED_NAME=$(echo "$UPDATE_ORG_RES" | jq -r '.name')
|
||||
if [ "$UPDATED_NAME" != "${ORG_NAME}_Updated" ]; then
|
||||
echo "Failed to update organization name"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "=================================================="
|
||||
echo "10. List Org Members..."
|
||||
MEMBERS_RES=$(curl -s -X GET "$BASE_URL/api/orgs/$ORG_ID/members" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
echo "List Members Response: $MEMBERS_RES"
|
||||
check_http_code "$MEMBERS_RES" 200
|
||||
|
||||
# Verify member count is at least 1 (the owner)
|
||||
TOTAL=$(echo "$MEMBERS_RES" | jq -r '.total')
|
||||
if [ "$TOTAL" -lt 1 ]; then
|
||||
echo "Expected at least 1 member, got $TOTAL"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
|
||||
echo "=================================================="
|
||||
echo "11. List Users..."
|
||||
USERS_RES=$(curl -s -X GET "$BASE_URL/api/users" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
echo "List Users Response: $USERS_RES"
|
||||
check_http_code "$USERS_RES" 200
|
||||
|
||||
echo "=================================================="
|
||||
echo "12. Delete Organization..."
|
||||
DELETE_ORG_RES=$(curl -s -X DELETE "$BASE_URL/api/orgs/$ORG_ID" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
echo "Delete Org Response: $DELETE_ORG_RES"
|
||||
check_http_code "$DELETE_ORG_RES" 200
|
||||
|
||||
# Verify deletion
|
||||
VERIFY_RES=$(curl -s -X GET "$BASE_URL/api/orgs/$ORG_ID" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
echo "Verify Delete Response: $VERIFY_RES"
|
||||
# Expect 404
|
||||
CODE=$(echo "$VERIFY_RES" | jq -r '.code')
|
||||
if [ "$CODE" != "404" ]; then
|
||||
echo "Organization not deleted properly, got code $CODE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "=================================================="
|
||||
echo "13. Logout..."
|
||||
LOGOUT_RES=$(curl -s -X POST "$BASE_URL/api/auth/logout" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN")
|
||||
echo "Logout Response: $LOGOUT_RES"
|
||||
check_http_code "$LOGOUT_RES" 200
|
||||
|
||||
echo "=================================================="
|
||||
echo "All Tests Passed Successfully!"
|
||||
Loading…
Reference in New Issue