solution-template_test.go

package main

import (
	"io"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"
)

// Test array for convenience
var testCases = []struct {
	name       string
	method     string
	url        string
	token      string
	wantStatus int
	wantBody   string
}{
	{
		name:       "Public /hello endpoint with no token",
		method:     "GET",
		url:        "/hello",
		token:      "",
		wantStatus: http.StatusOK,
		wantBody:   "Hello!",
	},
	{
		name:       "Secure /secure endpoint no token",
		method:     "GET",
		url:        "/secure",
		token:      "",
		wantStatus: http.StatusUnauthorized,
		wantBody:   "",
	},
	{
		name:       "Secure /secure endpoint invalid token",
		method:     "GET",
		url:        "/secure",
		token:      "invalid",
		wantStatus: http.StatusUnauthorized,
		wantBody:   "",
	},
	{
		name:       "Secure /secure endpoint correct token",
		method:     "GET",
		url:        "/secure",
		token:      "secret",
		wantStatus: http.StatusOK,
		wantBody:   "You are authorized!",
	},
	{
		name:       "Public /hello endpoint with invalid token",
		method:     "GET",
		url:        "/hello",
		token:      "wrong",
		wantStatus: http.StatusOK,
		wantBody:   "Hello!",
	},
	{
		name:       "Public /hello endpoint with correct token",
		method:     "GET",
		url:        "/hello",
		token:      "secret",
		wantStatus: http.StatusOK,
		wantBody:   "Hello!",
	},
	{
		name:       "Different method on /secure with valid token",
		method:     "POST",
		url:        "/secure",
		token:      "secret",
		wantStatus: http.StatusOK,
		wantBody:   "You are authorized!",
	},
	{
		name:       "Different method on /secure with no token",
		method:     "POST",
		url:        "/secure",
		token:      "",
		wantStatus: http.StatusUnauthorized,
		wantBody:   "",
	},
}

func TestMiddleware(t *testing.T) {
	server := SetupServer()

	for _, tc := range testCases {
		t.Run(tc.name, func(t *testing.T) {
			req := httptest.NewRequest(tc.method, tc.url, nil)
			if tc.token != "" {
				req.Header.Set("X-Auth-Token", tc.token)
			}
			rr := httptest.NewRecorder()

			server.ServeHTTP(rr, req)

			if rr.Code != tc.wantStatus {
				t.Errorf("Expected status %d, got %d", tc.wantStatus, rr.Code)
			}
			body := strings.TrimSpace(rr.Body.String())
			if body != tc.wantBody {
				t.Errorf("Expected body %q, got %q", tc.wantBody, body)
			}
		})
	}
}

func BenchmarkSecureRoute(b *testing.B) {
	server := SetupServer()

	for i := 0; i < b.N; i++ {
		req := httptest.NewRequest("GET", "/secure", nil)
		req.Header.Set("X-Auth-Token", "secret")
		rr := httptest.NewRecorder()
		server.ServeHTTP(rr, req)
		io.Copy(io.Discard, rr.Result().Body)
	}
}