578 lines
20 KiB
JavaScript
578 lines
20 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
import { module, test } from 'qunit';
|
|
import {
|
|
visit,
|
|
currentURL,
|
|
find,
|
|
click,
|
|
fillIn,
|
|
waitUntil,
|
|
} from '@ember/test-helpers';
|
|
import { setupApplicationTest } from 'admin/tests/helpers';
|
|
import setupMirage from 'ember-cli-mirage/test-support/setup-mirage';
|
|
import { Response } from 'miragejs';
|
|
import { authenticateSession } from 'ember-simple-auth/test-support';
|
|
import * as selectors from './selectors';
|
|
import * as commonSelectors from 'admin/tests/helpers/selectors';
|
|
|
|
module(
|
|
'Acceptance | credential-stores | credentials | update',
|
|
function (hooks) {
|
|
setupApplicationTest(hooks);
|
|
setupMirage(hooks);
|
|
|
|
let featuresService;
|
|
|
|
const instances = {
|
|
scopes: {
|
|
global: null,
|
|
org: null,
|
|
project: null,
|
|
},
|
|
staticCredentialStore: null,
|
|
usernamePasswordCredential: null,
|
|
usernameKeyPairCredential: null,
|
|
jsonCredential: null,
|
|
};
|
|
|
|
const urls = {
|
|
projectScope: null,
|
|
credentialStores: null,
|
|
staticCredentialStore: null,
|
|
credentials: null,
|
|
usernamePasswordCredential: null,
|
|
usernameKeyPairCredential: null,
|
|
jsonCredential: null,
|
|
};
|
|
|
|
const mockResponseMessage = 'Error in provided request.';
|
|
const mockResponseDescription = 'Name is required.';
|
|
const mockResponse = () => {
|
|
return new Response(
|
|
400,
|
|
{},
|
|
{
|
|
status: 400,
|
|
code: 'invalid_argument',
|
|
message: mockResponseMessage,
|
|
details: {
|
|
request_fields: [
|
|
{
|
|
name: 'name',
|
|
description: mockResponseDescription,
|
|
},
|
|
],
|
|
},
|
|
},
|
|
);
|
|
};
|
|
|
|
hooks.beforeEach(async function () {
|
|
// Generate resources
|
|
instances.scopes.global = this.server.create('scope', { id: 'global' });
|
|
instances.scopes.org = this.server.create('scope', {
|
|
type: 'org',
|
|
scope: { id: 'global', type: 'global' },
|
|
});
|
|
instances.scopes.project = this.server.create('scope', {
|
|
type: 'project',
|
|
scope: { id: instances.scopes.org.id, type: 'org' },
|
|
});
|
|
instances.staticCredentialStore = this.server.create('credential-store', {
|
|
scope: instances.scopes.project,
|
|
type: 'static',
|
|
});
|
|
instances.usernamePasswordCredential = this.server.create('credential', {
|
|
scope: instances.scopes.project,
|
|
credentialStore: instances.staticCredentialStore,
|
|
type: 'username_password',
|
|
});
|
|
instances.usernameKeyPairCredential = this.server.create('credential', {
|
|
scope: instances.scopes.project,
|
|
credentialStore: instances.staticCredentialStore,
|
|
type: 'ssh_private_key',
|
|
});
|
|
instances.jsonCredential = this.server.create('credential', {
|
|
scope: instances.scopes.project,
|
|
credentialStore: instances.staticCredentialStore,
|
|
type: 'json',
|
|
});
|
|
// Generate route URLs for resources
|
|
urls.projectScope = `/scopes/${instances.scopes.project.id}`;
|
|
urls.credentialStores = `${urls.projectScope}/credential-stores`;
|
|
urls.staticCredentialStore = `${urls.credentialStores}/${instances.staticCredentialStore.id}`;
|
|
urls.credentials = `${urls.staticCredentialStore}/credentials`;
|
|
urls.usernamePasswordCredential = `${urls.credentials}/${instances.usernamePasswordCredential.id}`;
|
|
urls.usernameKeyPairCredential = `${urls.credentials}/${instances.usernameKeyPairCredential.id}`;
|
|
urls.jsonCredential = `${urls.credentials}/${instances.jsonCredential.id}`;
|
|
|
|
featuresService = this.owner.lookup('service:features');
|
|
await authenticateSession({});
|
|
});
|
|
|
|
test('can save changes to existing username & password credential', async function (assert) {
|
|
assert.notEqual(
|
|
instances.usernamePasswordCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.usernamePasswordCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.SAVE_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernamePasswordCredential);
|
|
assert.strictEqual(
|
|
this.server.schema.credentials.where({ type: 'username_password' })
|
|
.models[0].name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
});
|
|
|
|
test('can save changes to existing username & key pair credential', async function (assert) {
|
|
assert.notEqual(
|
|
instances.usernameKeyPairCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.SAVE_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernameKeyPairCredential);
|
|
assert.strictEqual(
|
|
this.server.schema.credentials.where({ type: 'ssh_private_key' })
|
|
.models[0].name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
});
|
|
|
|
test('can save changes to existing JSON credential', async function (assert) {
|
|
featuresService.enable('json-credentials');
|
|
assert.notEqual(
|
|
instances.jsonCredential.name,
|
|
commonSelectors.FIELD_NAME,
|
|
);
|
|
await visit(urls.jsonCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.SAVE_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.jsonCredential);
|
|
assert.strictEqual(
|
|
this.server.schema.credentials.where({ type: 'json' }).models[0].name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
});
|
|
|
|
test('cannot make changes to an existing username & password credential without proper authorization', async function (assert) {
|
|
instances.usernamePasswordCredential.authorized_actions =
|
|
instances.usernamePasswordCredential.authorized_actions.filter(
|
|
(item) => item !== 'update',
|
|
);
|
|
|
|
await visit(urls.usernamePasswordCredential);
|
|
|
|
assert.dom(commonSelectors.EDIT_BTN).doesNotExist();
|
|
});
|
|
|
|
test('cannot make changes to an existing username & key pair credential without proper authorization', async function (assert) {
|
|
instances.usernameKeyPairCredential.authorized_actions =
|
|
instances.usernameKeyPairCredential.authorized_actions.filter(
|
|
(item) => item !== 'update',
|
|
);
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
assert.dom(commonSelectors.EDIT_BTN).doesNotExist();
|
|
});
|
|
|
|
test('cannot make changes to an existing JSON credential without proper authorization', async function (assert) {
|
|
instances.jsonCredential.authorized_actions =
|
|
instances.jsonCredential.authorized_actions.filter(
|
|
(item) => item !== 'update',
|
|
);
|
|
await visit(urls.jsonCredential);
|
|
|
|
assert.dom(commonSelectors.EDIT_BTN).doesNotExist();
|
|
});
|
|
|
|
test('can cancel changes to existing username & password credential', async function (assert) {
|
|
await visit(urls.usernamePasswordCredential);
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.CANCEL_BTN);
|
|
|
|
assert.notEqual(
|
|
instances.usernamePasswordCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME)
|
|
.hasValue(instances.usernamePasswordCredential.name);
|
|
});
|
|
|
|
test('can cancel changes to existing username & key pair credential', async function (assert) {
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.CANCEL_BTN);
|
|
|
|
assert.notEqual(
|
|
instances.usernameKeyPairCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME)
|
|
.hasValue(instances.usernameKeyPairCredential.name);
|
|
});
|
|
|
|
test('can cancel changes to existing JSON credential', async function (assert) {
|
|
await visit(urls.jsonCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.CANCEL_BTN);
|
|
|
|
assert.notEqual(
|
|
instances.jsonCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME)
|
|
.hasValue(instances.jsonCredential.name);
|
|
});
|
|
|
|
test('saving an existing username & password credential with invalid fields displays error message', async function (assert) {
|
|
this.server.patch('/credentials/:id', mockResponse);
|
|
await visit(urls.usernamePasswordCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.SAVE_BTN);
|
|
|
|
assert.dom(commonSelectors.ALERT_TOAST_BODY).hasText(mockResponseMessage);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME_ERROR)
|
|
.hasText(mockResponseDescription);
|
|
});
|
|
|
|
test('saving an existing username & key pair credential with invalid fields displays error message', async function (assert) {
|
|
this.server.patch('/credentials/:id', mockResponse);
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.SAVE_BTN);
|
|
|
|
assert.dom(commonSelectors.ALERT_TOAST_BODY).hasText(mockResponseMessage);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME_ERROR)
|
|
.hasText(mockResponseDescription);
|
|
});
|
|
|
|
test('saving an existing JSON credential with invalid fields displays error message', async function (assert) {
|
|
this.server.patch('/credentials/:id', mockResponse);
|
|
await visit(urls.jsonCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await click(commonSelectors.SAVE_BTN);
|
|
|
|
assert.dom(commonSelectors.ALERT_TOAST_BODY).hasText(mockResponseMessage);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME_ERROR)
|
|
.hasText(mockResponseDescription);
|
|
});
|
|
|
|
test('can discard unsaved username & password credential changes via dialog', async function (assert) {
|
|
assert.expect(5);
|
|
const confirmService = this.owner.lookup('service:confirm');
|
|
confirmService.enabled = true;
|
|
assert.notEqual(
|
|
instances.usernamePasswordCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.usernamePasswordCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN, 'Activate edit mode');
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
assert.strictEqual(currentURL(), urls.usernamePasswordCredential);
|
|
try {
|
|
await visit(urls.credentials);
|
|
} catch (e) {
|
|
assert.dom(commonSelectors.MODAL_WARNING).isVisible();
|
|
|
|
await click(commonSelectors.MODAL_WARNING_CONFIRM_BTN, 'Click Discard');
|
|
|
|
assert.strictEqual(currentURL(), urls.credentials);
|
|
assert.notEqual(
|
|
this.server.schema.credentials.where({ type: 'username_password' })
|
|
.models[0].name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
}
|
|
});
|
|
|
|
test('can discard unsaved username & key pair credential changes via dialog', async function (assert) {
|
|
assert.expect(5);
|
|
const confirmService = this.owner.lookup('service:confirm');
|
|
confirmService.enabled = true;
|
|
assert.notEqual(
|
|
instances.usernameKeyPairCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernameKeyPairCredential);
|
|
|
|
try {
|
|
await visit(urls.credentials);
|
|
} catch (e) {
|
|
assert.dom(commonSelectors.MODAL_WARNING).isVisible();
|
|
|
|
await click(commonSelectors.MODAL_WARNING_CONFIRM_BTN, 'Click Discard');
|
|
|
|
assert.strictEqual(currentURL(), urls.credentials);
|
|
assert.notEqual(
|
|
this.server.schema.credentials.where({ type: 'ssh_private_key' })
|
|
.models[0].name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
}
|
|
});
|
|
|
|
test('can discard unsaved JSON credential changes via dialog', async function (assert) {
|
|
assert.expect(5);
|
|
const confirmService = this.owner.lookup('service:confirm');
|
|
confirmService.enabled = true;
|
|
assert.notEqual(
|
|
instances.jsonCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.jsonCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
assert.strictEqual(currentURL(), urls.jsonCredential);
|
|
|
|
try {
|
|
await visit(urls.credentials);
|
|
} catch (e) {
|
|
assert.dom(commonSelectors.MODAL_WARNING).isVisible();
|
|
|
|
await click(commonSelectors.MODAL_WARNING_CONFIRM_BTN, 'Click Discard');
|
|
|
|
assert.strictEqual(currentURL(), urls.credentials);
|
|
assert.notEqual(
|
|
this.server.schema.credentials.where({ type: 'json' }).models[0].name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
}
|
|
});
|
|
|
|
test('can cancel discard unsaved username & password credential changes via dialog', async function (assert) {
|
|
assert.expect(6);
|
|
const confirmService = this.owner.lookup('service:confirm');
|
|
confirmService.enabled = true;
|
|
assert.notEqual(
|
|
instances.usernamePasswordCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.usernamePasswordCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
const credentialName = find(commonSelectors.FIELD_NAME).value;
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernamePasswordCredential);
|
|
|
|
try {
|
|
await visit(urls.credentials);
|
|
} catch (e) {
|
|
assert.dom(commonSelectors.MODAL_WARNING).isVisible();
|
|
|
|
await click(commonSelectors.MODAL_WARNING_CANCEL_BTN, 'Click Cancel');
|
|
|
|
assert.strictEqual(currentURL(), urls.usernamePasswordCredential);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME)
|
|
.hasValue(commonSelectors.FIELD_NAME_VALUE);
|
|
assert.strictEqual(
|
|
this.server.schema.credentials.where({ type: 'username_password' })
|
|
.models[0].name,
|
|
credentialName,
|
|
);
|
|
}
|
|
});
|
|
|
|
test('can cancel discard unsaved username & key pair credential changes via dialog', async function (assert) {
|
|
assert.expect(6);
|
|
const confirmService = this.owner.lookup('service:confirm');
|
|
confirmService.enabled = true;
|
|
assert.notEqual(
|
|
instances.usernameKeyPairCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
const credentialName = find(commonSelectors.FIELD_NAME).value;
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernameKeyPairCredential);
|
|
|
|
try {
|
|
await visit(urls.credentials);
|
|
} catch (e) {
|
|
assert.dom(commonSelectors.MODAL_WARNING).isVisible();
|
|
|
|
await click(commonSelectors.MODAL_WARNING_CANCEL_BTN, 'Click Cancel');
|
|
|
|
assert.strictEqual(currentURL(), urls.usernameKeyPairCredential);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME)
|
|
.hasValue(commonSelectors.FIELD_NAME_VALUE);
|
|
assert.strictEqual(
|
|
this.server.schema.credentials.where({ type: 'ssh_private_key' })
|
|
.models[0].name,
|
|
credentialName,
|
|
);
|
|
}
|
|
});
|
|
|
|
test('can cancel discard unsaved JSON credential changes via dialog', async function (assert) {
|
|
assert.expect(6);
|
|
const confirmService = this.owner.lookup('service:confirm');
|
|
confirmService.enabled = true;
|
|
assert.notEqual(
|
|
instances.jsonCredential.name,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
await visit(urls.jsonCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
const credentialName = find(commonSelectors.FIELD_NAME).value;
|
|
await fillIn(
|
|
commonSelectors.FIELD_NAME,
|
|
commonSelectors.FIELD_NAME_VALUE,
|
|
);
|
|
assert.strictEqual(currentURL(), urls.jsonCredential);
|
|
try {
|
|
await visit(urls.credentials);
|
|
} catch (e) {
|
|
assert.dom(commonSelectors.MODAL_WARNING).isVisible();
|
|
await click(commonSelectors.MODAL_WARNING_CANCEL_BTN, 'Click Cancel');
|
|
assert.strictEqual(currentURL(), urls.jsonCredential);
|
|
assert
|
|
.dom(commonSelectors.FIELD_NAME)
|
|
.hasValue(commonSelectors.FIELD_NAME_VALUE);
|
|
assert.strictEqual(
|
|
this.server.schema.credentials.where({ type: 'json' }).models[0].name,
|
|
credentialName,
|
|
);
|
|
}
|
|
});
|
|
|
|
test('password field renders in edit mode only for a username & password credential', async function (assert) {
|
|
await visit(urls.usernamePasswordCredential);
|
|
|
|
assert.dom(commonSelectors.FIELD_PASSWORD).doesNotExist();
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernamePasswordCredential);
|
|
assert.dom(commonSelectors.FIELD_PASSWORD).isVisible();
|
|
});
|
|
|
|
test('private_key and private_key_passphrase fields render in edit mode only for a username & key pair credential', async function (assert) {
|
|
await visit(urls.usernameKeyPairCredential);
|
|
|
|
assert.dom(selectors.FIELD_SSH_PRIVATE_KEY).doesNotExist();
|
|
assert.dom(selectors.FIELD_SSH_PRIVATE_KEY_PASSPHRASE).doesNotExist();
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.usernameKeyPairCredential);
|
|
assert.dom(selectors.FIELD_SSH_PRIVATE_KEY).isVisible();
|
|
assert.dom(selectors.FIELD_SSH_PRIVATE_KEY_PASSPHRASE).isVisible();
|
|
});
|
|
|
|
test('secret editor is in actionable state when entering edit mode of a JSON credential', async function (assert) {
|
|
await visit(urls.jsonCredential);
|
|
|
|
assert.dom(selectors.REPLACE_SECRET_BTN).doesNotExist();
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.jsonCredential);
|
|
assert.dom(selectors.REPLACE_SECRET_BTN).isVisible();
|
|
});
|
|
|
|
test('secret editor enters editing state when clicking edit button in the secret editor of a JSON credential', async function (assert) {
|
|
await visit(urls.jsonCredential);
|
|
|
|
await click(commonSelectors.EDIT_BTN);
|
|
|
|
assert.strictEqual(currentURL(), urls.jsonCredential);
|
|
assert.dom(selectors.REPLACE_SECRET_BTN).isVisible();
|
|
|
|
await click(selectors.REPLACE_SECRET_BTN);
|
|
|
|
assert.dom(selectors.REPLACE_SECRET_BTN).doesNotExist();
|
|
await waitUntil(() => assert.dom('.CodeMirror').isVisible());
|
|
});
|
|
},
|
|
);
|