Add test case with expired token

Signed-off-by: Victor Chang <vicchang@nvidia.com>

Author: mocsharp

src/Authentication/Extensions/HttpContextExtension.cs

@@ -46,7 +46,6 @@ public static List<string> GetValidEndpoints(this HttpContext httpcontext, List<
                 {
                     return claim.Endpoints!;
                 }
-
             }
 
             return new List<string>();

src/Authentication/Extensions/MonaiAuthenticationExtensions.cs

@@ -17,7 +17,6 @@
 using System.Text;
 using Microsoft.AspNetCore.Authentication;
 using Microsoft.AspNetCore.Authentication.JwtBearer;
-using Microsoft.AspNetCore.Authorization;
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;

src/Authentication/Tests/EndpointAuthorizationMiddlewareTest.cs

@@ -109,6 +109,23 @@ public async Task GivenConfigurationFileWithOpenIdConfigured_WhenUserIsAuthentic
             Assert.Equal(HttpStatusCode.Forbidden, responseMessage.StatusCode);
         }
 
+        [Theory]
+        [InlineData("role-with-test")]
+        public async Task GivenConfigurationFileWithOpenIdConfigured_WhenUserProvidesAnExpiredToken_ExpectToDenyRequest(string role)
+        {
+            using var host = await new HostBuilder().ConfigureWebHost(SetupWebServer("test.auth.json")).StartAsync().ConfigureAwait(false);
+
+            var server = host.GetTestServer();
+            server.BaseAddress = new Uri("https://example.com/");
+
+            var token = MockJwtTokenHandler.GenerateJwtToken(role, -5);
+
+            var client = server.CreateClient();
+            client.DefaultRequestHeaders.Add("Authorization", $"{JwtBearerDefaults.AuthenticationScheme} {token}");
+            var responseMessage = await client.GetAsync("api/Test").ConfigureAwait(false);
+
+            Assert.Equal(HttpStatusCode.Unauthorized, responseMessage.StatusCode);
+        }
 
         private static Action<IWebHostBuilder> SetupWebServer(string configFile) => webBuilder =>
         {

src/Authentication/Tests/MockJwtTokenHandler.cs

@@ -37,10 +37,10 @@ static MockJwtTokenHandler()
                 SigningCredentials = new SigningCredentials(SecurityKey, SecurityAlgorithms.HmacSha256Signature);
             }
 
-            public static string GenerateJwtToken(string role)
+            public static string GenerateJwtToken(string role, int expiresInMinutes = 5)
             {
                 var claims = new[] { new Claim("user_roles", role) };
-                return TokenHandler.WriteToken(new JwtSecurityToken(Issuer, "monai-app", claims, null, DateTime.UtcNow.AddMinutes(20), SigningCredentials));
+                return TokenHandler.WriteToken(new JwtSecurityToken(Issuer, "monai-app", claims, null, DateTime.UtcNow.AddMinutes(expiresInMinutes), SigningCredentials));
             }
         }
     }

src/Authentication/Tests/test.auth.json

@@ -28,4 +28,4 @@
       }
     }
   }
-}
+}

src/Authentication/Tests/test.bypassd.json

@@ -2,4 +2,4 @@
   "MonaiDeployAuthentication": {
     "BypassAuthentication": true
   }
-}
+}

src/Authentication/Tests/test.emptyopenid.json

@@ -3,4 +3,4 @@
     "BypassAuthentication": false,
     "OpenId": {}
   }
-}
+}

src/Authentication/Tests/test.noauth.json

@@ -1,2 +1,2 @@
 {
-}
+}

src/Authentication/example.json

@@ -27,4 +27,4 @@
       }
     }
   }
-}
+}