Testing webapi with openId

[hyzx86]

I found that the authorisation used in our unit test was simulated, causing it to run differently than it would in a real environment

OrchardCore/test/OrchardCore.Tests/Apis/Context/AuthenticationContext.cs

Lines 37 to 66 in ba5e8c0

	var permissions = (_permissionsContext.AuthorizedPermissions ?? []).ToList();
	if (!_permissionsContext.UsePermissionsContext)
	{
	context.Succeed(requirement);
	}
	else if (permissions.Contains(requirement.Permission))
	{
	context.Succeed(requirement);
	}
	else
	{
	var grantingNames = new HashSet<string>(StringComparer.OrdinalIgnoreCase);
	GetGrantingNamesInternal(requirement.Permission, grantingNames);
	// SiteOwner permission grants them all
	grantingNames.Add(StandardPermissions.SiteOwner.Name);
	if (permissions.Any(p => grantingNames.Contains(p.Name)))
	{
	context.Succeed(requirement);
	}
	else
	{
	context.Fail();
	}
	}
	return Task.CompletedTask;

It is recommended to use OpenId requests to simulate requests in unit tests

We can use password streams to simulate different permission levels by creating users with different permissions
I'm validating this idea based on version 1.8.

[hyzx86]

It doesn't look like there's much in the way of unit testing for OC that needs to be tested this way at the moment