Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
5 changed files
with
2,721 additions
and
43 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,132 @@ | ||
| import * as fc from "fast-check"; | ||
|
|
||
| import { FiscalCode } from "italia-ts-commons/lib/strings"; | ||
|
|
||
| import { UserGroup } from "io-functions-commons/dist/src/utils/middlewares/azure_api_auth"; | ||
|
|
||
| import { canWriteMessage } from "../handler"; | ||
|
|
||
| // | ||
| // custom fastcheck arbitraries | ||
| // | ||
|
|
||
| const upperCaseAlphaArb = fc.subarray( | ||
| "ABCDEFGHIJKLMNOPQRSTUVWXYZ".split(""), | ||
| 1, | ||
| 1 | ||
| ); | ||
|
|
||
| const fiscalCodeAlphaNumArb = fc.subarray( | ||
| "0123456789LMNPQRSTUV".split(""), | ||
| 1, | ||
| 1 | ||
| ); | ||
|
|
||
| const fiscalCodeControlAlphaArb = fc.subarray("ABCDEHLMPRST".split(""), 1, 1); | ||
|
|
||
| // generate a fiscal code that matches FiscalCode's regexp | ||
| // note that this may not be an actual valid fiscal code as the last | ||
| // control digit needs to be calculated while here we just generate | ||
| // one randomly. | ||
| const fiscalCodeArb = fc | ||
| .tuple( | ||
| fc.array(upperCaseAlphaArb, 6, 6).map(_ => _.join("")), | ||
| fc.array(fiscalCodeAlphaNumArb, 2, 2).map(_ => _.join("")), | ||
| fiscalCodeControlAlphaArb, | ||
| fc.array(fiscalCodeAlphaNumArb, 2, 2).map(_ => _.join("")), | ||
| upperCaseAlphaArb, | ||
| fc.array(fiscalCodeAlphaNumArb, 3, 3).map(_ => _.join("")), | ||
| upperCaseAlphaArb | ||
| ) | ||
| .map(sx => sx.join("") as FiscalCode); | ||
|
|
||
| const fiscalCodeArrayArb = fc.array(fiscalCodeArb); | ||
|
|
||
| const fiscalCodeSetArb = fiscalCodeArrayArb.map(_ => new Set(_)); | ||
|
|
||
| // | ||
| // tests | ||
| // | ||
|
|
||
| describe("canWriteMessage", () => { | ||
| it("should respond with ResponseErrorForbiddenNotAuthorizedForProduction when service is in no group", () => { | ||
| fc.assert( | ||
| fc.property( | ||
| fiscalCodeArrayArb, | ||
| fiscalCodeArb, | ||
| fc.boolean(), | ||
| (authorizedRecipients, recipient, isAuthorized) => { | ||
| const response = canWriteMessage( | ||
| new Set(), // no groups | ||
| new Set( | ||
| authorizedRecipients.concat(isAuthorized ? [recipient] : []) | ||
| ), // any authorized recipient, possibly also the current one | ||
| recipient // one random recipient | ||
| ); | ||
| expect(response.isLeft()).toBeTruthy(); | ||
| if (response.isLeft()) { | ||
| expect(response.value.kind).toEqual( | ||
| "IResponseErrorForbiddenNotAuthorizedForProduction" | ||
| ); | ||
| } | ||
| } | ||
| ) | ||
| ); | ||
| }); | ||
|
|
||
| it("should respond with ResponseErrorForbiddenNotAuthorizedForRecipient when service is trying to send message to an unauthorized recipient", () => { | ||
| fc.assert( | ||
| fc.property( | ||
| fiscalCodeArrayArb, | ||
| fiscalCodeArb, | ||
| (authorizedRecipients, recipient) => { | ||
| const response = canWriteMessage( | ||
| new Set([UserGroup.ApiLimitedMessageWrite]), | ||
| new Set(authorizedRecipients.filter(_ => _ !== recipient)), // current recipient is not authorized | ||
| recipient | ||
| ); | ||
| expect(response.isLeft()).toBeTruthy(); | ||
| if (response.isLeft()) { | ||
| expect(response.value.kind).toEqual( | ||
| "IResponseErrorForbiddenNotAuthorizedForRecipient" | ||
| ); | ||
| } | ||
| } | ||
| ) | ||
| ); | ||
| }); | ||
|
|
||
| it("should pass when service is trying to send message to an authorized recipient", () => { | ||
| fc.assert( | ||
| fc.property( | ||
| fiscalCodeArrayArb, | ||
| fiscalCodeArb, | ||
| (authorizedRecipients, recipient) => { | ||
| const response = canWriteMessage( | ||
| new Set([UserGroup.ApiLimitedMessageWrite]), | ||
| new Set([...authorizedRecipients, recipient]), // current recipient always authorized | ||
| recipient | ||
| ); | ||
| expect(response.isRight()).toBeTruthy(); | ||
| } | ||
| ) | ||
| ); | ||
| }); | ||
|
|
||
| it("should pass when service can send messages to any recipient", () => { | ||
| fc.assert( | ||
| fc.property( | ||
| fiscalCodeSetArb, | ||
| fiscalCodeArb, | ||
| (authorizedRecipients, recipient) => { | ||
| const response = canWriteMessage( | ||
| new Set([UserGroup.ApiMessageWrite]), | ||
| authorizedRecipients, | ||
| recipient | ||
| ); | ||
| expect(response.isRight()).toBeTruthy(); | ||
| } | ||
| ) | ||
| ); | ||
| }); | ||
| }); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| module.exports = { | ||
| preset: 'ts-jest', | ||
| testEnvironment: 'node', | ||
| }; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.