Unit Testing ASP.NET Core AAD Auth

Question

I'm using Selenium to Unit Test an Azure AD application in ASP.NET Core MVC web app and I am looking for a better method of logging in the test user besides searching the DOM for login input elements. I'm Unit Testing in Azure DevOps so logging in with the browser UI is not an option. Any ideas?

Gary Archer · Accepted Answer · 2020-07-29 23:04:23Z

2

In OAuth based technologies it is not easy to get a token as a user without an interactive redirect. For automated test purposes the simplest option is often to use the Resource Owner Password Grant. This is not recommended for production usage in real UIs though.

answered Jul 29, 2020 at 23:04

Gary Archer

30.2k2 gold badges18 silver badges37 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

James S. Over a year ago

I did not know Microsoft even allowed that. I was able to get this working in conjunction with a client_secret to acquire the Access Token and ID Token. Now how can I get this into the cookie?

Gary Archer Over a year ago

Ah - I was assuming you were using a token based Web UI in which case my suggestion would work well for testing. Cookie based apps come with lots of hidden complexity and this is only one aspect. You will need to act like a real browser and simulate posting DOM element values if you need cookies to call APIs.

James S. Over a year ago

That's what I'm doing now, and it's quite painful. I'll just leave it at that then, as I don't want to switch to storing tokens on the client just to make unit testing easier.

Collectives™ on Stack Overflow

Unit Testing ASP.NET Core AAD Auth

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related