canaille-globuzma/tests/test_token_revocation.py

from . import client_credentials


def test_token_revocation(testclient, user, client, token, slapd_connection):
    assert not token.oauthRevokationDate

    res = testclient.post(
        "/oauth/revoke",
        params=dict(
            token=token.oauthAccessToken,
        ),
        headers={"Authorization": f"Basic {client_credentials(client)}"},
        status=200,
    )
    assert {} == res.json

    token.reload(slapd_connection)
    assert token.oauthRevokationDate


def test_token_invalid(testclient, client):
    res = testclient.post(
        "/oauth/revoke",
        params=dict(token="invalid"),
        headers={"Authorization": f"Basic {client_credentials(client)}"},
        status=200,
    )
    assert {} == res.json