koa-lite/test/context/cookies.js

'use strict';

var request = require('supertest');
var koa = require('../..');

describe('ctx.cookies.set()', function(){
  it('should set an unsigned cookie', function(done){
    var app = koa();

    app.use(function *(next){
      this.cookies.set('name', 'jon');
      this.status = 204;
    })

    var server = app.listen();

    request(server)
    .get('/')
    .expect(204)
    .end(function(err, res){
      if (err) return done(err);

      res.headers['set-cookie'].some(function(cookie){
        return /^name=/.test(cookie);
      }).should.be.ok;

      done();
    })
  })

  describe('with .signed', function(){
    describe('when no .keys are set', function(){
      it('should error', function(done){
        var app = koa();

        app.use(function *(next){
          try {
            this.cookies.set('foo', 'bar', { signed: true });
          } catch (err) {
            this.body = err.message;
          }
        });

        request(app.listen())
        .get('/')
        .expect('.keys required for signed cookies', done);
      })
    })

    it('should send a signed cookie', function(done){
      var app = koa();

      app.keys = ['a', 'b'];

      app.use(function *(next){
        this.cookies.set('name', 'jon', { signed: true });
        this.status = 204;
      })

      var server = app.listen();

      request(server)
      .get('/')
      .expect(204)
      .end(function(err, res){
        if (err) return done(err);

        var cookies = res.headers['set-cookie'];

        cookies.some(function(cookie){
          return /^name=/.test(cookie);
        }).should.be.ok;

        cookies.some(function(cookie){
          return /^name\.sig=/.test(cookie);
        }).should.be.ok;

        done();
      })
    })
  })

  describe('with secure', function(){
    it('should get secure from request', function(done){
      var app = koa();

      app.proxy = true;
      app.keys = ['a', 'b'];

      app.use(function *(next){
        this.cookies.set('name', 'jon', { signed: true });
        this.status = 204;
      })

      var server = app.listen();

      request(server)
      .get('/')
      .set('x-forwarded-proto', 'https') // mock secure
      .expect(204)
      .end(function(err, res){
        if (err) return done(err);

        var cookies = res.headers['set-cookie'];
        cookies.some(function(cookie){
          return /^name=/.test(cookie);
        }).should.be.ok;

        cookies.some(function(cookie){
          return /^name\.sig=/.test(cookie);
        }).should.be.ok;

        cookies.every(function(cookie){
          return /secure/.test(cookie);
        }).should.be.ok;

        done();
      })
    })
  })
})