feat: add unit test to cover that CRSF filter is working

Onlineberatung · Apr 17, 2024 · 6d5b84d · 6d5b84d
1 parent 7a9db36
commit 6d5b84d
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/src/test/java/de/caritas/cob/mailservice/api/controller/MailControllerE2EIT.java b/src/test/java/de/caritas/cob/mailservice/api/controller/MailControllerE2EIT.java
@@ -84,6 +84,20 @@ void sendMailsShouldRespondWithOkWhenEmailListIsEmpty() throws Exception {
         .andExpect(status().isOk());
   }
 
+  @Test
+  void sendMailsShouldRespondWithAccessDeniedWhenCrsfTokenIsNotGiven() throws Exception {
+    givenAnEmptyEmailList();
+
+    mockMvc
+        .perform(
+            post("/mails/send")
+                .cookie(CSRF_COOKIE)
+                .contentType(MediaType.APPLICATION_JSON)
+                .content(objectMapper.writeValueAsString(mailsDTO))
+                .accept(MediaType.APPLICATION_JSON))
+        .andExpect(status().isForbidden());
+  }
+
   @Test
   void sendMailsShouldSendEmailAndRenderDataWithDefaultLanguageWhenLanguageNotGiven()
       throws Exception {