Authentication Store Tests

Author: mckaragoz

src/authentication/CodeBeam.UltimateAuth.Authentication.EntityFrameworkCore/Stores/EfCoreAuthenticationSecurityStateStore.cs

@@ -38,6 +38,21 @@ public EfCoreAuthenticationSecurityStateStore(TDbContext db, TenantExecutionCont
 
     public async Task AddAsync(AuthenticationSecurityState state, CancellationToken ct = default)
     {
+        ct.ThrowIfCancellationRequested();
+
+        if (state.Tenant != _tenant)
+            throw new InvalidOperationException("Tenant mismatch.");
+
+        var exists = await DbSet.AnyAsync(x =>
+            x.Tenant == _tenant &&
+            x.UserKey == state.UserKey &&
+            x.Scope == state.Scope &&
+            x.CredentialType == state.CredentialType,
+            ct);
+
+        if (exists)
+            throw new UAuthConflictException("security_state_already_exists");
+
         var entity = AuthenticationSecurityStateMapper.ToProjection(state);
 
         DbSet.Add(entity);
@@ -47,6 +62,11 @@ public async Task AddAsync(AuthenticationSecurityState state, CancellationToken
 
     public async Task UpdateAsync(AuthenticationSecurityState state, long expectedVersion, CancellationToken ct = default)
     {
+        ct.ThrowIfCancellationRequested();
+
+        if (state.Tenant != _tenant)
+            throw new InvalidOperationException("Tenant mismatch.");
+
         var entity = await DbSet
             .SingleOrDefaultAsync(x =>
                 x.Tenant == _tenant &&

src/authentication/CodeBeam.UltimateAuth.Authentication.InMemory/InMemoryAuthenticationSecurityStateStore.cs

@@ -70,11 +70,14 @@ public Task UpdateAsync(AuthenticationSecurityState state, long expectedVersion,
 
         var key = (state.UserKey, state.Scope, state.CredentialType);
 
-        if (!_index.TryGetValue(key, out var id) || id != state.Id)
+        if (!_index.TryGetValue(key, out var id))
+            throw new UAuthNotFoundException("security_state_not_found");
+
+        if (id != state.Id)
             throw new UAuthConflictException("security_state_index_corrupted");
 
         if (!_byId.TryGetValue(state.Id, out var current))
-            throw new UAuthNotFoundException("security_state_not_found");
+            throw new UAuthConflictException("security_state_index_corrupted");
 
         if (current.SecurityVersion != expectedVersion)
             throw new UAuthConflictException("security_state_version_conflict");