/** * Copyright (c) HashiCorp, Inc. * SPDX-License-Identifier: BUSL-1.1 */ import { module, test } from 'qunit'; import { visit, click, currentURL } from '@ember/test-helpers'; import { setupApplicationTest } from 'admin/tests/helpers'; import setupMirage from 'ember-cli-mirage/test-support/setup-mirage'; import { setupIndexedDb } from 'api/test-support/helpers/indexed-db'; import { Response } from 'miragejs'; import { authenticateSession } from 'ember-simple-auth/test-support'; import { TYPE_AUTH_METHOD_LDAP } from 'api/models/auth-method'; import * as commonSelectors from 'admin/tests/helpers/selectors'; import * as selectors from './selectors'; module('Acceptance | auth-methods | delete', function (hooks) { setupApplicationTest(hooks); setupMirage(hooks); setupIndexedDb(hooks); let featuresService; let getAuthMethodCount; const instances = { scopes: { global: null, org: null, }, authMethod: null, ldapAuthMethod: null, }; const urls = { orgScope: null, authMethods: null, authMethod: null, ldapAuthMethod: null, }; hooks.beforeEach(async function () { // Setup Mirage mock resources for this test await authenticateSession({ username: 'admin' }); instances.scopes.global = this.server.create('scope', { id: 'global' }); instances.scopes.org = this.server.create('scope', { type: 'org', scope: { id: 'global', type: 'global' }, }); instances.authMethod = this.server.create('auth-method', { scope: instances.scopes.org, }); instances.ldapAuthMethod = this.server.create('auth-method', { scope: instances.scopes.org, type: TYPE_AUTH_METHOD_LDAP, }); // Generate route URLs for resources urls.orgScope = `/scopes/${instances.scopes.org.id}`; urls.authMethods = `${urls.orgScope}/auth-methods`; urls.authMethod = `${urls.authMethods}/${instances.authMethod.id}`; urls.ldapAuthMethod = `${urls.authMethods}/${instances.ldapAuthMethod.id}`; featuresService = this.owner.lookup('service:features'); getAuthMethodCount = () => this.server.schema.authMethods.all().models.length; }); test('can delete an auth method', async function (assert) { const authMethodsCount = getAuthMethodCount(); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.authMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); assert.strictEqual(getAuthMethodCount(), authMethodsCount - 1); }); test('can delete an ldap auth method', async function (assert) { featuresService.enable('ldap-auth-methods'); const authMethodsCount = getAuthMethodCount(); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.ldapAuthMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); assert.strictEqual(getAuthMethodCount(), authMethodsCount - 1); }); test('errors are displayed when delete on an auth method fails', async function (assert) { this.server.del('/auth-methods/:id', () => { return new Response( 490, {}, { status: 490, code: 'error', message: 'Oops.', }, ); }); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.authMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); assert.dom(commonSelectors.ALERT_TOAST_BODY).hasText('Oops.'); }); test('errors are displayed when delete on an ldap auth method fails', async function (assert) { featuresService.enable('ldap-auth-methods'); this.server.del('/auth-methods/:id', () => { return new Response( 490, {}, { status: 490, code: 'error', message: 'Oops.', }, ); }); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.ldapAuthMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); assert.dom(commonSelectors.ALERT_TOAST_BODY).hasText('Oops.'); }); test('cannot delete an auth method without proper authorization', async function (assert) { instances.authMethod.authorized_actions = instances.authMethod.authorized_actions.filter( (item) => item !== 'delete', ); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.authMethod)); await click(selectors.MANAGE_DROPDOWN); assert.dom(selectors.MANAGE_DROPDOWN_DELETE).doesNotExist(); }); test('cannot delete an ldap auth method without proper authorization', async function (assert) { featuresService.enable('ldap-auth-methods'); instances.ldapAuthMethod.authorized_actions = instances.ldapAuthMethod.authorized_actions.filter( (item) => item !== 'delete', ); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.ldapAuthMethod)); await click(selectors.MANAGE_DROPDOWN); assert.dom(selectors.MANAGE_DROPDOWN_DELETE).doesNotExist(); }); test('user can accept delete auth method via dialog', async function (assert) { const confirmService = this.owner.lookup('service:confirm'); confirmService.enabled = true; const authMethodCount = getAuthMethodCount(); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.authMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); await click(commonSelectors.MODAL_WARNING_CONFIRM_BTN); assert.strictEqual(currentURL(), urls.authMethods); assert.strictEqual(getAuthMethodCount(), authMethodCount - 1); }); test('user can accept delete ldap auth method via dialog', async function (assert) { const confirmService = this.owner.lookup('service:confirm'); confirmService.enabled = true; featuresService.enable('ldap-auth-methods'); const authMethodCount = getAuthMethodCount(); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.ldapAuthMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); await click(commonSelectors.MODAL_WARNING_CONFIRM_BTN); assert.strictEqual(currentURL(), urls.authMethods); assert.strictEqual(getAuthMethodCount(), authMethodCount - 1); }); test('user can cancel delete auth method via dialog', async function (assert) { const confirmService = this.owner.lookup('service:confirm'); confirmService.enabled = true; const authMethodCount = getAuthMethodCount(); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.authMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); await click(commonSelectors.MODAL_WARNING_CANCEL_BTN); assert.strictEqual(currentURL(), urls.authMethod); assert.strictEqual(getAuthMethodCount(), authMethodCount); }); test('user can cancel delete ldap auth method via dialog', async function (assert) { const confirmService = this.owner.lookup('service:confirm'); confirmService.enabled = true; featuresService.enable('ldap-auth-methods'); const authMethodCount = getAuthMethodCount(); await visit(urls.authMethods); await click(commonSelectors.HREF(urls.ldapAuthMethod)); await click(selectors.MANAGE_DROPDOWN); await click(selectors.MANAGE_DROPDOWN_DELETE); await click(commonSelectors.MODAL_WARNING_CANCEL_BTN); assert.strictEqual(currentURL(), urls.ldapAuthMethod); assert.strictEqual(getAuthMethodCount(), authMethodCount); }); });