[shopsys] refresh tokens for FE API (#1736)

shopsys · Mar 31, 2020 · 3e9a056 · 3e9a056
1 parent e997bae
commit 3e9a056
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 5 deletions.
diff --git a/config/graphql/types/Login.types.yml b/config/graphql/types/Login.types.yml
diff --git a/config/graphql/types/LoginInput.types.yml b/config/graphql/types/LoginInput.types.yml
@@ -0,0 +1,4 @@
+LoginInput:
+    type: input-object
+    inherits:
+        - 'LoginInputDecorator'
diff --git a/config/graphql/types/RefreshTokenInput.types.yml b/config/graphql/types/RefreshTokenInput.types.yml
@@ -0,0 +1,4 @@
+RefreshTokenInput:
+    type: input-object
+    inherits:
+        - 'RefreshTokenInputDecorator'
diff --git a/config/packages/security.yml b/config/packages/security.yml
@@ -14,6 +14,9 @@ security:
         user_identities:
             id: Shopsys\FrameworkBundle\Model\Customer\User\FrontendCustomerUserProvider
 
+        frontend_api_user_identities:
+            id: Shopsys\FrontendApiBundle\Model\User\FrontendApiUserProvider
+
     firewalls:
         # see Shopsys\FrameworkBundle\Model\Administrator\Security\AdministratorFrontSecurityFacade
         administration:
@@ -39,7 +42,7 @@ security:
                 invalidate_session: false
         frontend_api:
             pattern: ^/graphql
-            provider: user_identities
+            provider: frontend_api_user_identities
             stateless: true
             anonymous: true
             guard:

diff --git a/tests/FrontendApiBundle/Functional/Login/LoginTest.php b/tests/FrontendApiBundle/Functional/Login/LoginTest.php
@@ -20,6 +20,8 @@ public function testLoginMutation(): void
         $responseData = $this->getResponseContentForQuery($this->getLoginQuery())['data']['Login'];
         $this->assertArrayHasKey('accessToken', $responseData);
         $this->assertIsString($responseData['accessToken']);
+        $this->assertArrayHasKey('refreshToken', $responseData);
+        $this->assertIsString($responseData['refreshToken']);
 
         try {
             $this->tokenFacade->getTokenByString($responseData['accessToken']);
@@ -30,6 +32,8 @@ public function testLoginMutation(): void
         $authorizationResponseData = $this->getResponseContentForQuery($this->getLoginQuery(), [], ['HTTP_Authorization' => sprintf('Bearer %s', $responseData['accessToken'])])['data']['Login'];
         $this->assertArrayHasKey('accessToken', $authorizationResponseData);
         $this->assertIsString($authorizationResponseData['accessToken']);
+        $this->assertArrayHasKey('refreshToken', $authorizationResponseData);
+        $this->assertIsString($authorizationResponseData['refreshToken']);
     }
 
     public function testInvalidTokenException()
@@ -65,6 +69,7 @@ private function getLoginQuery(): string
                     password: "user123"
                 }) {
                     accessToken
+                    refreshToken
                 }
             }
         ';