mirror of
https://github.com/kuhyx/wake-alarm.git
synced 2026-11-11 21:14:03 +01:00
Krzysztof kuhy Rudnicki
37a7829757
Same pattern as todo, diet_guard_app, and workout_app: openFirebaseWithGoogle() (google_platform.dart abstracts the plugin's platform-channel dependence), isFirebaseConfigured() reading the stored session rather than the account marker alone, and the settings screen offering "Sign in with Google" ahead of the password form. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KdSp6Nbrs9xvsWkCMDN9a1
89 lines
3.3 KiB
Dart
89 lines
3.3 KiB
Dart
import 'dart:convert';
|
|
|
|
import 'package:crdt_sync/crdt_sync.dart';
|
|
import 'package:flutter_test/flutter_test.dart';
|
|
import 'package:http/http.dart' as http;
|
|
import 'package:http/testing.dart' as http_testing;
|
|
import 'package:wake_alarm_sync/services/firebase_backend.dart';
|
|
import 'package:wake_alarm_sync/services/google_sign_in_backend.dart';
|
|
|
|
import 'fake_secure_storage.dart';
|
|
|
|
/// Answers a `signInWithIdp` call the way Firebase does.
|
|
http_testing.MockClient _signsInAs(String email, {String uid = kSyncUid}) =>
|
|
http_testing.MockClient(
|
|
(request) async => http.Response(
|
|
jsonEncode({
|
|
'idToken': 'id',
|
|
'refreshToken': 'refresh',
|
|
'expiresIn': '3600',
|
|
'email': email,
|
|
'localId': uid,
|
|
}),
|
|
200,
|
|
),
|
|
);
|
|
|
|
void main() {
|
|
// installFakeSecureStorage touches the test binary messenger, which only
|
|
// exists once the binding is initialised.
|
|
TestWidgetsFlutterBinding.ensureInitialized();
|
|
|
|
// openFirebaseWithGoogle reaches the keystore through a platform channel;
|
|
// the fake stands in so the account write is really exercised rather than
|
|
// stubbed out at the call site.
|
|
setUp(installFakeSecureStorage);
|
|
|
|
group('openFirebaseWithGoogle', () {
|
|
test('returns null when the picker is dismissed', () async {
|
|
// Cancelling is ordinary: no session, no account, no error.
|
|
final saved = <FirebaseAccount>[];
|
|
final client = await openFirebaseWithGoogle(
|
|
tokenFetcher: () async => null,
|
|
accountSaver: (account) async => saved.add(account),
|
|
);
|
|
|
|
expect(client, isNull);
|
|
expect(saved, isEmpty);
|
|
});
|
|
|
|
test('stores the account under the email Firebase reports', () async {
|
|
// The regression this test exists for. A fresh install has no email
|
|
// anywhere on the device, so it must come from the sign-in response. An
|
|
// earlier cut read it from the settings screen's text field -- empty on
|
|
// exactly this path -- and persisted FirebaseAccount(email: ''); the
|
|
// next launch then took the password branch with '' and failed.
|
|
final saved = <FirebaseAccount>[];
|
|
final client = await openFirebaseWithGoogle(
|
|
tokenFetcher: () async => 'a-token',
|
|
accountSaver: (account) async => saved.add(account),
|
|
httpClient: _signsInAs('signed-in@example.com'),
|
|
);
|
|
|
|
expect(client, isNotNull);
|
|
expect(saved, hasLength(1));
|
|
expect(saved.single.email, 'signed-in@example.com');
|
|
// No password to store: this device authenticates with the refresh
|
|
// token, and openFirebase() must not later try to sign in with ''.
|
|
expect(saved.single.password, isEmpty);
|
|
client!.close();
|
|
});
|
|
|
|
test('stores nothing when Google resolves to the wrong uid', () async {
|
|
// Authentication succeeds and the uid is wrong, which the security
|
|
// rules would deny on every read and write. Failing here -- with
|
|
// nothing persisted -- leaves the device retryable rather than stuck.
|
|
final saved = <FirebaseAccount>[];
|
|
await expectLater(
|
|
openFirebaseWithGoogle(
|
|
tokenFetcher: () async => 'a-token',
|
|
accountSaver: (account) async => saved.add(account),
|
|
httpClient: _signsInAs('someone@example.com', uid: 'a-different-uid'),
|
|
),
|
|
throwsA(isA<FirebaseAuthError>()),
|
|
);
|
|
expect(saved, isEmpty);
|
|
});
|
|
});
|
|
}
|