threshold-ui/ui/admin/tests/acceptance/auth-methods/list-test.js

/**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: BUSL-1.1
 */

import { module, test } from 'qunit';
import { visit, click, waitFor, fillIn } from '@ember/test-helpers';
import { setupApplicationTest } from 'admin/tests/helpers';
import setupMirage from 'ember-cli-mirage/test-support/setup-mirage';
import { setupIndexedDb } from 'api/test-support/helpers/indexed-db';
import { authenticateSession } from 'ember-simple-auth/test-support';
import {
  TYPE_AUTH_METHOD_PASSWORD,
  TYPE_AUTH_METHOD_OIDC,
} from 'api/models/auth-method';
import * as commonSelectors from 'admin/tests/helpers/selectors';
import * as selectors from './selectors';

module('Acceptance | auth-methods | list', function (hooks) {
  setupApplicationTest(hooks);
  setupMirage(hooks);
  setupIndexedDb(hooks);

  const instances = {
    scopes: {
      global: null,
      org: null,
    },
    passwordAuthMethod: null,
    oidcAuthMethod: null,
  };

  const urls = {
    globalScope: null,
    orgScope: null,
    authMethods: null,
    passwordAuthMethod: null,
    oidcAuthMethod: null,
  };

  hooks.beforeEach(async function () {
    instances.scopes.global = this.server.create('scope', { id: 'global' });
    instances.scopes.org = this.server.create(
      'scope',
      {
        type: 'org',
        scope: { id: 'global', type: 'global' },
      },
      'withChildren',
    );
    instances.passwordAuthMethod = this.server.create('auth-method', {
      scope: instances.scopes.org,
      type: TYPE_AUTH_METHOD_PASSWORD,
    });
    instances.oidcAuthMethod = this.server.create('auth-method', {
      scope: instances.scopes.org,
      type: TYPE_AUTH_METHOD_OIDC,
    });
    urls.globalScope = `/scopes/global/scopes`;
    urls.orgScope = `/scopes/${instances.scopes.org.id}`;
    urls.authMethods = `/scopes/${instances.scopes.org.id}/auth-methods`;
    urls.passwordAuthMethod = `${urls.authMethods}/${instances.passwordAuthMethod.id}`;
    urls.oidcAuthMethod = `${urls.authMethods}/${instances.oidcAuthMethod.id}`;

    await authenticateSession({});
  });

  test('users can navigate to auth methods with proper authorization', async function (assert) {
    await visit(urls.globalScope);

    await click(commonSelectors.HREF(urls.orgScope));

    assert.true(
      instances.scopes.org.authorized_collection_actions[
        'auth-methods'
      ].includes('list'),
    );
    assert.dom(commonSelectors.HREF(urls.authMethods)).isVisible();
  });

  test('users cannot navigate to index without either list or create actions', async function (assert) {
    instances.scopes.org.authorized_collection_actions['auth-methods'] = [];
    await visit(urls.globalScope);

    await click(commonSelectors.HREF(urls.orgScope));

    assert.false(
      instances.scopes.org.authorized_collection_actions[
        'auth-methods'
      ].includes('list'),
    );
    assert.dom(commonSelectors.HREF(urls.authMethods)).isNotVisible();
  });

  test('users can navigate to index with only create action', async function (assert) {
    instances.scopes.org.authorized_collection_actions['auth-methods'] = [
      'create',
    ];
    await visit(urls.globalScope);

    await click(commonSelectors.HREF(urls.orgScope));
    assert.dom(commonSelectors.HREF(urls.authMethods)).isVisible();
  });

  test('user can search for a specifc auth-method by id', async function (assert) {
    await visit(urls.orgScope);

    await click(commonSelectors.HREF(urls.authMethods));
    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isVisible();

    await fillIn(selectors.SEARCH_BAR_INPUT, instances.passwordAuthMethod.id);
    await waitFor(commonSelectors.HREF(urls.oidcAuthMethod), { count: 0 });

    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isNotVisible();
  });

  test('user can search for auth-methods and get no results', async function (assert) {
    await visit(urls.orgScope);

    await click(commonSelectors.HREF(urls.authMethods));
    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isVisible();

    await fillIn(selectors.SEARCH_BAR_INPUT, 'fake target that does not exist');
    await waitFor(commonSelectors.PAGE_MESSAGE_HEADER, { count: 1 });

    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isNotVisible();
    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isNotVisible();
    assert
      .dom(commonSelectors.PAGE_MESSAGE_HEADER)
      .includesText('No results found');
  });

  test('user can filter for auth-methods by type', async function (assert) {
    await visit(urls.orgScope);

    await click(commonSelectors.HREF(urls.authMethods));
    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isVisible();

    await click(commonSelectors.FILTER_DROPDOWN('type'));
    await click(
      commonSelectors.FILTER_DROPDOWN_ITEM(TYPE_AUTH_METHOD_PASSWORD),
    );
    await click(commonSelectors.FILTER_DROPDOWN_ITEM_APPLY_BTN('type'));

    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isNotVisible();
    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
  });

  test('user can filter for auth-methods by primary', async function (assert) {
    await visit(urls.orgScope);

    await click(commonSelectors.HREF(urls.authMethods));
    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isVisible();

    await click(
      selectors.TABLE_ACTION_DROPDOWN(instances.passwordAuthMethod.id),
    );
    await click(
      selectors.TABLE_ACTION_DROPDOWN_MAKE_PRIMARY(
        instances.passwordAuthMethod.id,
      ),
    );

    await click(commonSelectors.FILTER_DROPDOWN('primary'));
    await click(commonSelectors.FILTER_DROPDOWN_ITEM('true'));
    await click(commonSelectors.FILTER_DROPDOWN_ITEM_APPLY_BTN('primary'));

    assert.dom(commonSelectors.HREF(urls.oidcAuthMethod)).isNotVisible();
    assert.dom(commonSelectors.HREF(urls.passwordAuthMethod)).isVisible();
  });
});