Add iat test

jclem · Oct 22, 2018 · 13518d2 · 13518d2
1 parent de78a61
commit 13518d2
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/test/post2slack/state_token_test.exs b/test/post2slack/state_token_test.exs
@@ -27,6 +27,18 @@ defmodule Post2Slack.StateTokenTest do
       assert StateToken.verify_token(token) == {:error, :invalid_token}
     end
 
+    test "errors for an invalid iat" do
+      token =
+        %Token{}
+        |> with_signer(hs256(Config.fetch!(:post2slack, :state_signing_secret)))
+        |> with_iat(current_time() + 60)
+        |> with_exp(current_time())
+        |> sign
+        |> get_compact
+
+      assert StateToken.verify_token(token) == {:error, :invalid_token}
+    end
+
     test "errors for an expired token" do
       token =
         %Token{}