Is there a way to bypass JWT authentication during a small integration/unit test? I tried using the

createTestEnvironment

in which I install Authentication but use a mockk for the verifier and validator, but that doesn't work. I also tried using

JWT.require(NoneAlgorithm).build()

but that didn't work either since NoneAlgorithm can't be used outside of its package.

I created an extension for all requests about this situation:

fun TestApplicationEngine.handleRequestWithToken(
    method: HttpMethod,
    uri: String,
    setup: TestApplicationRequest.() -> Unit = {}
): TestApplicationCall {
    val token = handleRequest(<http://HttpMethod.Post|HttpMethod.Post>, "/login") {
        addHeader(HttpHeaders.ContentType, ContentType.Application.Json.toString())
        addHeader(HttpHeaders.Accept, ContentType.Application.Json.toString())
        setBody(Json.encodeToString(UserRequest("emirhan", "1234")))
    }.response.content

    val requestSetup: TestApplicationRequest.() -> Unit = {
        addHeader(HttpHeaders.ContentType, ContentType.Application.Json.toString())
        addHeader(HttpHeaders.Accept, ContentType.Application.Json.toString())
        addHeader(HttpHeaders.Authorization, "Bearer $token")
        setup.invoke(this)
    }
    return handleRequest(method, uri, requestSetup)
}

Thank you so much! This is exactly what I was looking for, and I just forgot about extension functions to provide this type of help. this is what I ended up with:

fun <R> withTestMyApplication(
    moduleFunction: Application.() -> Unit,
    test: TestApplicationEngine.() -> R,
): R {
    return withTestApplication {
        application.apply {
            install(Authentication) {
                jwt("auth-jwt") {
                    verifier(Authenticator.verifier())
                    validate { Authenticator.validate(it) }
                }
            }

            moduleFunction()
        }
        test()
    }
}


fun TestApplicationEngine.handleAuthRequest(
    method: HttpMethod,
    uri: String,
    setup: TestApplicationRequest.() -> Unit = {},
): TestApplicationCall {

    val token = Authenticator.createToken()

    val requestSetup: TestApplicationRequest.() -> Unit = {
        addHeader(HttpHeaders.ContentType, ContentType.Application.Json.toString())
        addHeader(HttpHeaders.Accept, ContentType.Application.Json.toString())
        addHeader(HttpHeaders.Authorization, "Bearer $token")
        this.setup()
    }
    return this.handleRequest(method, uri, requestSetup)

I just wrote an article about this maybe it helps another developers: https://medium.com/@emirhanemmez/write-test-for-authenticated-requests-in-ktor-630f2fd0ca25