1 files changed, 35 insertions, 0 deletions
diff --git a/muck/authz_tests.py b/muck/authz_tests.py
new file mode 100644
index 0000000..7e16cbe
--- /dev/null
+++ b/muck/authz_tests.py
@@ -0,0 +1,35 @@
+# Copyright (C) 2018  Lars Wirzenius
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+
+import unittest
+
+import muck
+
+
+class AuthorizationCheckerTests(unittest.TestCase):
+
+    def test_denies_if_token_parsing_fails(self):
+        claims = {
+            'foo': 'bar',
+        }
+        token = muck.create_token(claims, muck.test_key_text)
+
+        r = muck.Request(method='GET')
+        r.add_headers({
+            'Authorization': 'Bearer {}'.format(token)
+        })
+
+        ac = muck.AuthorizationChecker()
+        self.assertFalse(ac.request_is_allowed(r))