Adding Flags API

tests/api/MicCheck.Api.Tests.Unit/Auth/TokenServiceTests.cs

@@ -1,6 +1,8 @@
 using System.IdentityModel.Tokens.Jwt;
-using Microsoft.Extensions.Configuration;
 using MicCheck.Api.Auth;
+using MicCheck.Api.Organizations;
+using MicCheck.Api.Users;
+using Microsoft.Extensions.Configuration;
 using NUnit.Framework;
 
 namespace MicCheck.Api.Tests.Unit.Auth;
@@ -27,29 +29,43 @@ public class TokenServiceTests
         _tokenService = new TokenService(_configuration);
     }
 
+    private static User BuildUser(int id = 1, string email = "alice@example.com") =>
+        new()
+        {
+            Email = email,
+            FirstName = "Alice",
+            LastName = "Smith",
+            PasswordHash = "hashed",
+            IsActive = true,
+            CreatedAt = DateTimeOffset.UtcNow
+        };
+
     [Test]
-    public void WhenAUsernameIsProvided_ThenATokenIsReturned()
+    public void WhenAUserIsProvided_ThenATokenIsReturned()
     {
-        var result = _tokenService.GenerateToken("testuser");
+        var result = _tokenService.GenerateToken(BuildUser());
 
         Assert.That(result.Token, Is.Not.Null.And.Not.Empty);
     }
 
     [Test]
-    public void WhenATokenIsGenerated_ThenItContainsTheUsernameAsSubjectClaim()
+    public void WhenATokenIsGenerated_ThenItContainsTheUserEmailClaim()
     {
-        var result = _tokenService.GenerateToken("testuser");
+        var user = BuildUser(email: "bob@example.com");
+
+        var result = _tokenService.GenerateToken(user);
 
         var handler = new JwtSecurityTokenHandler();
         var jwt = handler.ReadJwtToken(result.Token);
 
-        Assert.That(jwt.Subject, Is.EqualTo("testuser"));
+        Assert.That(jwt.Claims.Any(c => c.Type == JwtRegisteredClaimNames.Email && c.Value == "bob@example.com"),
+            Is.True);
     }
 
     [Test]
     public void WhenATokenIsGenerated_ThenItHasAFutureExpiry()
     {
-        var result = _tokenService.GenerateToken("testuser");
+        var result = _tokenService.GenerateToken(BuildUser());
 
         Assert.That(result.ExpiresAt, Is.GreaterThan(DateTime.UtcNow));
     }
@@ -57,11 +73,31 @@ public class TokenServiceTests
     [Test]
     public void WhenATokenIsGenerated_ThenItHasTheConfiguredIssuer()
     {
-        var result = _tokenService.GenerateToken("testuser");
+        var result = _tokenService.GenerateToken(BuildUser());
 
         var handler = new JwtSecurityTokenHandler();
         var jwt = handler.ReadJwtToken(result.Token);
 
         Assert.That(jwt.Issuer, Is.EqualTo("MicCheck"));
     }
+
+    [Test]
+    public void WhenUserBelongsToOrganizations_ThenTokenContainsOrganizationClaims()
+    {
+        var user = BuildUser();
+        user.Organizations.Add(new OrganizationUser
+        {
+            OrganizationId = 42,
+            UserId = user.Id,
+            Role = OrganizationRole.Admin
+        });
+
+        var result = _tokenService.GenerateToken(user);
+
+        var handler = new JwtSecurityTokenHandler();
+        var jwt = handler.ReadJwtToken(result.Token);
+
+        Assert.That(jwt.Claims.Any(c => c.Type == "OrganizationId" && c.Value == "42"), Is.True);
+        Assert.That(jwt.Claims.Any(c => c.Type == "OrganizationRole" && c.Value == "Admin"), Is.True);
+    }
 }