test fialed secret reader

token/jwt.go

@@ -97,6 +97,10 @@ func (j *Service) Token(claims Claims) (string, error) {
 
 	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
 
+	if j.SecretReader == nil {
+		return "", errors.New("secretreader not defined")
+	}
+
 	secret, err := j.SecretReader.Get(claims.Audience) // get secret via consumer defined SecretReader
 	if err != nil {
 		return "", errors.Wrap(err, "can't get secret")

token/jwt_test.go

@@ -8,6 +8,7 @@ import (
 	"time"
 
 	jwt "github.com/dgrijalva/jwt-go"
+	"github.com/pkg/errors"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -64,6 +65,14 @@ func TestJWT_Token(t *testing.T) {
 	res, err := j.Token(claims)
 	assert.Nil(t, err)
 	assert.Equal(t, testJwtValid, res)
+
+	j.SecretReader = nil
+	res, err = j.Token(claims)
+	assert.EqualError(t, err, "secretreader not defined")
+
+	j.SecretReader = SecretFunc(func(id string) (string, error) { return "", errors.New("err blah") })
+	res, err = j.Token(claims)
+	assert.EqualError(t, err, "can't get secret: err blah")
 }
 
 func TestJWT_Parse(t *testing.T) {
@@ -91,6 +100,14 @@ func TestJWT_Parse(t *testing.T) {
 	})
 	_, err = j.Parse(testJwtValid)
 	assert.NotNil(t, err, "bad token", "valid token parsed with wrong secret")
+
+	j = NewService(Opts{
+		SecretReader: SecretFunc(func(id string) (string, error) {
+			return "", errors.New("err blah")
+		}),
+	})
+	_, err = j.Parse(testJwtValid)
+	assert.EqualError(t, err, "can't get secret: err blah")
 }
 
 func TestJWT_Set(t *testing.T) {