snapshot of https://github.com/cortezaproject/corteza.git (2024.9.x, 2026-09-18; blobs > 131072B omitted)

server/tests/system/auth_client_test.go

@@ -0,0 +1,174 @@
+package system
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/cortezaproject/corteza/server/pkg/id"
+	"github.com/cortezaproject/corteza/server/store"
+	"github.com/cortezaproject/corteza/server/system/service"
+	"github.com/cortezaproject/corteza/server/system/types"
+	"github.com/cortezaproject/corteza/server/tests/helpers"
+	jsonpath "github.com/steinfletcher/apitest-jsonpath"
+)
+
+func (h helper) clearAuthClients() {
+	h.noError(store.TruncateAuthClients(context.Background(), service.DefaultStore))
+}
+
+func (h helper) repoMakeAuthClient(ss ...string) *types.AuthClient {
+	res := &types.AuthClient{
+		ID:        id.Next(),
+		CreatedAt: time.Now(),
+	}
+
+	if len(ss) > 0 {
+		res.Handle = ss[0]
+	} else {
+		res.Handle = "n_" + rs()
+	}
+
+	h.a.NoError(store.CreateAuthClient(context.Background(), service.DefaultStore, res))
+
+	return res
+}
+
+func (h helper) lookupAuthClientByID(id uint64) *types.AuthClient {
+	res, err := store.LookupAuthClientByID(context.Background(), service.DefaultStore, id)
+	h.noError(err)
+	return res
+}
+
+func (h helper) lookupAuthClientByHandle(handle string) *types.AuthClient {
+	res, err := store.LookupAuthClientByHandle(context.Background(), service.DefaultStore, handle)
+	h.noError(err)
+	return res
+}
+
+func TestAuthClientList(t *testing.T) {
+	h := newHelper(t)
+	h.clearAuthClients()
+
+	h.repoMakeAuthClient()
+	h.repoMakeAuthClient()
+
+	helpers.AllowMe(h, types.ComponentRbacResource(), "auth-clients.search")
+	helpers.AllowMe(h, types.AuthClientRbacResource(0), "read")
+
+	h.apiInit().
+		Get("/auth/clients/").
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		Assert(jsonpath.Len(`$.response.set`, 2)).
+		End()
+}
+
+func TestAuthClientRead(t *testing.T) {
+	h := newHelper(t)
+	h.clearAuthClients()
+
+	client := h.repoMakeAuthClient()
+
+	helpers.AllowMe(h, types.AuthClientRbacResource(0), "read")
+
+	h.apiInit().
+		Get(fmt.Sprintf("/auth/clients/%d", client.ID)).
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		End()
+}
+
+func TestAuthClientCreate(t *testing.T) {
+	h := newHelper(t)
+	h.clearAuthClients()
+
+	handle := rs()
+
+	helpers.AllowMe(h, types.ComponentRbacResource(), "auth-clients.search")
+	helpers.AllowMe(h, types.ComponentRbacResource(), "auth-client.create")
+
+	h.apiInit().
+		Post("/auth/clients/").
+		Header("Accept", "application/json").
+		FormData("meta", fmt.Sprintf(`{"name": "%s"}`, rs())).
+		FormData("handle", handle).
+		FormData("scope", "profile api").
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		End()
+
+	res := h.lookupAuthClientByHandle(handle)
+	h.a.NotNil(res)
+	h.a.Equal(handle, res.Handle)
+}
+
+func TestAuthClientUpdate(t *testing.T) {
+	h := newHelper(t)
+	h.clearAuthClients()
+
+	client := h.repoMakeAuthClient()
+	client.Meta = &types.AuthClientMeta{Name: rs()}
+	client.Handle = rs()
+
+	helpers.AllowMe(h, types.AuthClientRbacResource(0), "update")
+
+	h.apiInit().
+		Put(fmt.Sprintf("/auth/clients/%d", client.ID)).
+		Header("Accept", "application/json").
+		JSON(helpers.JSON(client)).
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		End()
+
+	res := h.lookupAuthClientByHandle(client.Handle)
+	h.a.NotNil(res)
+}
+
+func TestAuthClientDelete(t *testing.T) {
+	h := newHelper(t)
+	h.clearAuthClients()
+
+	client := h.repoMakeAuthClient()
+
+	helpers.AllowMe(h, types.AuthClientRbacResource(0), "delete")
+
+	h.apiInit().
+		Delete(fmt.Sprintf("/auth/clients/%d", client.ID)).
+		Header("Accept", "application/json").
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		End()
+
+	res := h.lookupAuthClientByID(client.ID)
+	h.a.NotNil(res)
+	h.a.NotNil(res.DeletedAt)
+}
+
+func TestAuthClientUnDelete(t *testing.T) {
+	h := newHelper(t)
+	h.clearAuthClients()
+
+	client := h.repoMakeAuthClient()
+
+	helpers.AllowMe(h, types.AuthClientRbacResource(0), "delete")
+
+	h.apiInit().
+		Post(fmt.Sprintf("/auth/clients/%d/undelete", client.ID)).
+		Header("Accept", "application/json").
+		Expect(t).
+		Status(http.StatusOK).
+		Assert(helpers.AssertNoErrors).
+		End()
+
+	res := h.lookupAuthClientByID(client.ID)
+	h.a.NotNil(res)
+	h.a.Nil(res.DeletedAt)
+}