Laravel testing with JWT-Auth

laravel, php, unit-testing

Solution

One way to test your API in this situation is to bypass the actual token verification, but still log your user in (if you need to identify the user). Here is a snippet of the helper method we used in our recent API-based application.

/**
 * Simulate call api
 *
 * @param  string $endpoint
 * @param  array  $params
 * @param  string $asUser
 *
 * @return mixed
 */
protected function callApi($endpoint, $params = [], $asUser = 'user@example.org')
{
    $endpoint = starts_with($endpoint, '/')
        ? $endpoint
        : '/' . $endpoint;

    $headers = [];

    if (!is_null($asUser)) {
        $token = auth()->guard('api')
            ->login(\Models\User::whereEmail($asUser)->first());

        $headers['Authorization'] = 'Bearer ' . $token;
    }

    return $this->json(
        'POST', 
        'http://api.dev/' . $endpoint,
        $params,
        $headers
    );
}

And is used like this:

$this->callApi('orders/list', [
        'type' => 'customers' 
    ])
    ->seeStatusOk()

Problem

I'm trying to test my api that's made with JWT_auth: https://github.com/tymondesigns/jwt-auth ``` class UpdateTest extends TestCase { use DatabaseTransactions; public $token; public function signIn($data = ['email'=>'mail@gmail.com', 'password'=>'secret']) { $this->post('api/login', $data); $content = json_decode($this->response->getContent()); $this->assertObjectHasAttribute('token', $content); $this->token = $content->token; return $this; } /** @test */ public function a_user_updates_his_account() { factory(User::class)->create([ 'name' => 'Test', 'last_name' => 'Test', 'email' => 'mail@gmail.com', 'mobile' => '062348383', 'function' => 'ceo', 'about' => 'About me.....', 'corporation_id' => 1 ]); $user = User::first(); $user->active = 2; $user->save(); $this->signIn(); $url = '/api/user/' . $user->slug . '?token=' . $this->token; $result = $this->json('GET', $url); dd($result); } } ``` Result is always: ``` The token could not be parsed from the request ``` How do I get this t work!? Source (https://github.com/tymondesigns/jwt-auth/issues/206)

Original source