medplum / medplum / 30958038603

92%

main: 92%

push

github

Add end-to-end regression tests for every supported auth strategy (#9905)

* Add end-to-end regression tests for every supported auth strategy

Adds a coarse-grained regression suite that drives each supported
authentication strategy through its real HTTP front door, obtains a
token, and proves it against a live FHIR API call, closing the gap
called out in #9879: existing per-strategy unit tests never chained a
login all the way through to FHIR API usage. Covers native password
login, external/OIDC, Google login, JWT bearer via RFC 8693 token
exchange, client credentials (shared secret, mTLS, and private_key_jwt
variants), the OpenID4VCI pre-authorized code grant, and direct HTTP
Basic auth against the FHIR API. Each strategy has isolated fixtures
in its own describe block so a regression in one strategy cannot
spuriously fail another.

Signed-off-by: Ian Plunkett <1857868+ianplunkett@users.noreply.github.com>

* Add end-to-end regression tests for every supported auth strategy

Adds a coarse-grained regression suite that drives each supported
authentication strategy through its real HTTP front door, obtains a
token, and proves it against a live FHIR API call, closing the gap
called out in #9879: existing per-strategy unit tests never chained a
login all the way through to FHIR API usage. Covers native password
login, external/OIDC, Google login, JWT bearer via RFC 8693 token
exchange, client credentials (shared secret, mTLS, and private_key_jwt
variants), the OpenID4VCI pre-authorized code grant, and direct HTTP
Basic auth against the FHIR API. Each strategy has isolated fixtures
in its own describe block so a regression in one strategy cannot
spuriously fail another.

Signed-off-by: Ian Plunkett <1857868+ianplunkett@users.noreply.github.com>

* [autofix.ci] apply automated fixes

* Address review feedback on auth strategy regression suite

- Narrow the global jose mock so it only bypasses signature
  verification for the two external-JWKS cases (Goo... (continued)

22963 of 26057 branches covered (88.13%)

Branch coverage included in aggregate %.

40745 of 43140 relevant lines covered (94.45%)

12215.33 hits per line