iframe-proxy | Sunbelt Computer Software

History

206 lines (159 loc) · 8.23 KB

Raw

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

namespace NpgsqlRestTests;

public static partial class Database

{

public static void AuthTests()

{

script.Append("""

create function authorized() returns text language sql as 'select ''authorized''';

comment on function authorized() is 'authorize';

create function authorized_roles1() returns text language sql as 'select ''roles1''';

comment on function authorized_roles1() is 'authorize test_role';

create function authorized_roles2() returns text language sql as 'select ''roles2''';

comment on function authorized_roles2() is 'authorize test_role, role1';

create function authorized_roles3() returns text language sql as 'select ''roles3''';

comment on function authorized_roles3() is 'authorize test_role1 role1 test_role2 test_role1';

create function authorized_roles4() returns text language sql as 'select ''roles4''';

comment on function authorized_roles4() is 'authorize test_role1 test_role2 test_role3';

create function authorized_by_name() returns text language sql as 'select ''by_name''';

comment on function authorized_by_name() is 'authorize user';

create function authorized_by_name_wrong() returns text language sql as 'select ''by_name_wrong''';

comment on function authorized_by_name_wrong() is 'authorize wrong_user';

create function authorized_by_userid() returns text language sql as 'select ''by_userid''';

comment on function authorized_by_userid() is 'authorize user123';

create function authorized_by_userid_wrong() returns text language sql as 'select ''by_userid_wrong''';

comment on function authorized_by_userid_wrong() is 'authorize wrong_id';

create function authorized_mixed() returns text language sql as 'select ''mixed''';

comment on function authorized_mixed() is 'authorize wrong_role, user123';

""");

}

[Collection("TestFixture")]

public class AuthorizedTests(TestFixture test)

{

[Fact]

public async Task Test_authorized()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

var content1 = await response1.Content.ReadAsStringAsync();

content1.Should().Contain("\"status\":401");

content1.Should().Contain("\"title\":\"Unauthorized\"");

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized/", null);

response2.StatusCode.Should().Be(HttpStatusCode.OK);

}

[Fact]

public async Task Test_authorized_roles1()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized-roles1/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

var content1 = await response1.Content.ReadAsStringAsync();

content1.Should().Contain("\"status\":401");

content1.Should().Contain("\"title\":\"Unauthorized\"");

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized-roles1/", null);

response2.StatusCode.Should().Be(HttpStatusCode.Forbidden);

var content2 = await response2.Content.ReadAsStringAsync();

content2.Should().Contain("\"status\":403");

content2.Should().Contain("\"title\":\"Forbidden\"");

}

[Fact]

public async Task Test_authorized_roles2()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized-roles2/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

var content1 = await response1.Content.ReadAsStringAsync();

content1.Should().Contain("\"status\":401");

content1.Should().Contain("\"title\":\"Unauthorized\"");

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized-roles2/", null);

response2.StatusCode.Should().Be(HttpStatusCode.OK);

}

[Fact]

public async Task Test_authorized_roles3()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized-roles3/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

var content1 = await response1.Content.ReadAsStringAsync();

content1.Should().Contain("\"status\":401");

content1.Should().Contain("\"title\":\"Unauthorized\"");

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized-roles3/", null);

response2.StatusCode.Should().Be(HttpStatusCode.OK);

}

[Fact]

public async Task Test_authorized_roles4()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized-roles4/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

var content1 = await response1.Content.ReadAsStringAsync();

content1.Should().Contain("\"status\":401");

content1.Should().Contain("\"title\":\"Unauthorized\"");

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized-roles4/", null);

response2.StatusCode.Should().Be(HttpStatusCode.Forbidden);

var content2 = await response2.Content.ReadAsStringAsync();

content2.Should().Contain("\"status\":403");

content2.Should().Contain("\"title\":\"Forbidden\"");

}

[Fact]

public async Task Test_authorized_by_name()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized-by-name/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized-by-name/", null);

response2.StatusCode.Should().Be(HttpStatusCode.OK);

}

[Fact]

public async Task Test_authorized_by_name_wrong()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var login = await client.GetAsync("/login");

using var response = await client.PostAsync("/api/authorized-by-name-wrong/", null);

response.StatusCode.Should().Be(HttpStatusCode.Forbidden);

}

[Fact]

public async Task Test_authorized_by_userid()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var response1 = await client.PostAsync("/api/authorized-by-userid/", null);

response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

using var login = await client.GetAsync("/login");

using var response2 = await client.PostAsync("/api/authorized-by-userid/", null);

response2.StatusCode.Should().Be(HttpStatusCode.OK);

}

[Fact]

public async Task Test_authorized_by_userid_wrong()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var login = await client.GetAsync("/login");

using var response = await client.PostAsync("/api/authorized-by-userid-wrong/", null);

response.StatusCode.Should().Be(HttpStatusCode.Forbidden);

}

[Fact]

public async Task Test_authorized_mixed()

{

using var client = test.Application.CreateClient();

client.Timeout = TimeSpan.FromHours(1);

using var login = await client.GetAsync("/login");

// wrong_role doesn't match, but user123 matches user_id claim

using var response = await client.PostAsync("/api/authorized-mixed/", null);

response.StatusCode.Should().Be(HttpStatusCode.OK);

}

Sunbelt Computer Software

PL/B Language Development and Support

Navigation Menu

Uh oh!

Uh oh!

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

Uh oh!

FilesExpand file tree

AuthorizedTests.cs

Latest commit

History

AuthorizedTests.cs

File metadata and controls