feat(auth): Implement create_refresh_token and add tests

This commit is contained in:
Yunxiao Xu
2026-02-18 13:25:36 -08:00
parent 1aa8faec00
commit 626b644740
2 changed files with 46 additions and 46 deletions

View File

@@ -61,6 +61,34 @@ def create_access_token(data: dict, expires_delta: Optional[timedelta] = None) -
encoded_jwt = jwt.encode(to_encode, settings.secret_key, algorithm=settings.algorithm)
return encoded_jwt
def create_refresh_token(data: dict, expires_delta: Optional[timedelta] = None) -> str:
"""
Create a JWT refresh token.
Args:
data: The payload data to encode.
expires_delta: Optional expiration time delta.
Returns:
str: The encoded JWT token.
"""
to_encode = data.copy()
now = datetime.now(timezone.utc)
if expires_delta:
expire = now + expires_delta
else:
expire = now + timedelta(days=settings.refresh_token_expire_days)
to_encode.update({
"exp": expire,
"iat": now,
"iss": "ea-chatbot-api",
"type": "refresh"
})
encoded_jwt = jwt.encode(to_encode, settings.secret_key, algorithm=settings.algorithm)
return encoded_jwt
def decode_access_token(token: str) -> Optional[dict]:
"""
Decode a JWT access token.

View File

@@ -1,51 +1,23 @@
from datetime import timedelta
from ea_chatbot.api.utils import create_access_token, decode_access_token, convert_to_json_compatible
from langchain_core.messages import AIMessage
def test_create_and_decode_access_token():
"""Test that a token can be created and then decoded."""
data = {"sub": "test@example.com", "user_id": "123"}
token = create_access_token(data)
from ea_chatbot.api.utils import create_access_token, create_refresh_token, decode_access_token
def test_create_access_token_with_custom_delta():
"""Test creating an access token with a custom expiration delta."""
data = {"sub": "user123"}
delta = timedelta(minutes=5)
token = create_access_token(data, expires_delta=delta)
decoded = decode_access_token(token)
assert decoded["sub"] == data["sub"]
assert decoded["user_id"] == data["user_id"]
assert decoded["sub"] == "user123"
assert "exp" in decoded
def test_decode_invalid_token():
"""Test that an invalid token returns None."""
assert decode_access_token("invalid-token") is None
def test_expired_token():
"""Test that an expired token returns None."""
data = {"sub": "test@example.com"}
# Create a token that expired 1 minute ago
token = create_access_token(data, expires_delta=timedelta(minutes=-1))
assert decode_access_token(token) is None
def test_convert_to_json_compatible_complex_message():
"""Test that list-based message content is handled correctly."""
# Mock a message with list-based content (blocks)
msg = AIMessage(content=[
{"type": "text", "text": "Hello "},
{"type": "text", "text": "world!"},
{"type": "other", "data": "ignore me"}
])
result = convert_to_json_compatible(msg)
assert result["content"] == "Hello world!"
assert result["type"] == "ai"
def test_convert_to_json_compatible_message_with_text_prop():
"""Test that .text property is prioritized if available."""
# Using a MagicMock to simulate the property safely
from unittest.mock import MagicMock
msg = MagicMock(spec=AIMessage)
msg.content = "Raw content"
msg.text = "Just the text"
msg.type = "ai"
msg.additional_kwargs = {}
result = convert_to_json_compatible(msg)
assert result["content"] == "Just the text"
def test_create_refresh_token():
"""Test creating a refresh token."""
data = {"sub": "user123"}
# This might fail if create_refresh_token is not yet implemented
token = create_refresh_token(data)
decoded = decode_access_token(token) # decode_access_token uses same secret/algorithm
assert decoded["sub"] == "user123"
assert "exp" in decoded
# Refresh token should have longer expiration than access token
# We can check the iat and exp to verify the duration
assert decoded["exp"] > decoded["iat"]