* fix: 🐛 properly show username for oidc auth method in user menu * test: 💍 fix admin ui tests * test: 💍 fix desktop ui tests * refactor: 💡 admin to not store username in authenticated object * refactor: 💡 use getter in app controller * test: 💍 POC for how we could update our tests to use auth account * refactor: 💡 remove unused service * test: 💍 fix all tests in ui/admin * test: 💍 revert one change * refactor: 💡 update ui/desktop w/ feedback + fix tests * refactor: 💡 add in error handling * refactor: 💡 cleanup unused service * test: 💍 fix e2e test selector ✅ Closes: https://hashicorp.atlassian.net/browse/ICU-17231
372 lines
11 KiB
JavaScript
372 lines
11 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
import { module, test } from 'qunit';
|
|
import { click, currentURL, visit } from '@ember/test-helpers';
|
|
import { setupApplicationTest } from 'admin/tests/helpers';
|
|
import { setupSqlite } from 'api/test-support/helpers/sqlite';
|
|
import { setupIntl } from 'ember-intl/test-support';
|
|
import {
|
|
TYPE_TARGET_TCP,
|
|
TYPE_TARGET_SSH,
|
|
TYPE_TARGET_RDP,
|
|
} from 'api/models/target';
|
|
import * as commonSelectors from 'admin/tests/helpers/selectors';
|
|
import * as selectors from './selectors';
|
|
import { setRunOptions } from 'ember-a11y-testing/test-support';
|
|
|
|
module('Acceptance | targets | read', function (hooks) {
|
|
setupApplicationTest(hooks);
|
|
setupSqlite(hooks);
|
|
setupIntl(hooks, 'en-us');
|
|
|
|
let featuresService;
|
|
let aliasResource;
|
|
|
|
const instances = {
|
|
scopes: {
|
|
global: null,
|
|
org: null,
|
|
project: null,
|
|
},
|
|
sshTarget: null,
|
|
tcpTarget: null,
|
|
alias: null,
|
|
rdpTarget: null,
|
|
};
|
|
const urls = {
|
|
globalScope: null,
|
|
orgScope: null,
|
|
projectScope: null,
|
|
targets: null,
|
|
sshTarget: null,
|
|
tcpTarget: null,
|
|
alias: null,
|
|
aliases: null,
|
|
rdpTarget: null,
|
|
};
|
|
|
|
hooks.beforeEach(async function () {
|
|
featuresService = this.owner.lookup('service:features');
|
|
// Generate resources
|
|
instances.scopes.global = this.server.schema.scopes.find('global');
|
|
instances.scopes.org = this.server.create('scope', {
|
|
type: 'org',
|
|
scope: { id: 'global', type: 'global' },
|
|
});
|
|
instances.scopes.project = this.server.create('scope', {
|
|
type: 'project',
|
|
scope: { id: instances.scopes.org.id, type: 'org' },
|
|
});
|
|
instances.sshTarget = this.server.create('target', {
|
|
type: TYPE_TARGET_SSH,
|
|
scope: instances.scopes.project,
|
|
});
|
|
instances.tcpTarget = this.server.create('target', {
|
|
type: TYPE_TARGET_TCP,
|
|
scope: instances.scopes.project,
|
|
});
|
|
instances.rdpTarget = this.server.create('target', {
|
|
type: TYPE_TARGET_RDP,
|
|
scope: instances.scopes.project,
|
|
});
|
|
|
|
instances.alias = this.server.createList('alias', 1, {
|
|
scope: instances.scopes.global,
|
|
value: 'alias 1',
|
|
});
|
|
|
|
aliasResource = instances.alias[0];
|
|
|
|
// Generate route URLs for resources
|
|
urls.globalScope = `/scopes/global`;
|
|
urls.orgScope = `/scopes/${instances.scopes.org.id}/scopes`;
|
|
urls.projectScope = `/scopes/${instances.scopes.project.id}`;
|
|
urls.targets = `${urls.projectScope}/targets`;
|
|
urls.sshTarget = `${urls.targets}/${instances.sshTarget.id}`;
|
|
urls.tcpTarget = `${urls.targets}/${instances.tcpTarget.id}`;
|
|
urls.unknownTarget = `${urls.targets}/foo`;
|
|
urls.aliases = `${urls.globalScope}/aliases`;
|
|
urls.alias = `${urls.tcpTarget}/${aliasResource.id}`;
|
|
urls.rdpTarget = `${urls.targets}/${instances.rdpTarget.id}`;
|
|
});
|
|
|
|
test('visiting ssh target', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
featuresService.enable('ssh-target');
|
|
await visit(urls.projectScope);
|
|
|
|
await click(commonSelectors.HREF(urls.targets));
|
|
|
|
assert.strictEqual(currentURL(), urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.sshTarget));
|
|
|
|
assert.strictEqual(currentURL(), urls.sshTarget);
|
|
});
|
|
|
|
test('visiting tcp target', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
await visit(urls.projectScope);
|
|
|
|
await click(commonSelectors.HREF(urls.targets));
|
|
assert.strictEqual(currentURL(), urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.tcpTarget));
|
|
|
|
assert.strictEqual(currentURL(), urls.tcpTarget);
|
|
});
|
|
|
|
test('cannot navigate to an ssh target form without proper authorization', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
featuresService.enable('ssh-target');
|
|
instances.sshTarget.authorized_actions =
|
|
instances.sshTarget.authorized_actions.filter((item) => item !== 'read');
|
|
|
|
await visit(urls.projectScope);
|
|
|
|
assert.dom(commonSelectors.TABLE_RESOURCE_LINK(urls.tcpTarget)).isVisible();
|
|
assert
|
|
.dom(commonSelectors.TABLE_RESOURCE_LINK(urls.sshTarget))
|
|
.doesNotExist();
|
|
});
|
|
|
|
test('cannot navigate to a tcp target form without proper authorization', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
featuresService.enable('ssh-target');
|
|
instances.tcpTarget.authorized_actions =
|
|
instances.tcpTarget.authorized_actions.filter((item) => item !== 'read');
|
|
|
|
await visit(urls.projectScope);
|
|
|
|
assert.dom(commonSelectors.TABLE_RESOURCE_LINK(urls.sshTarget)).isVisible();
|
|
assert
|
|
.dom(commonSelectors.TABLE_RESOURCE_LINK(urls.tcpTarget))
|
|
.doesNotExist();
|
|
});
|
|
|
|
test('visiting an unknown target displays 404 message', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
await visit(urls.unknownTarget);
|
|
|
|
assert
|
|
.dom(commonSelectors.RESOURCE_NOT_FOUND_SUBTITLE)
|
|
.hasText(commonSelectors.RESOURCE_NOT_FOUND_VALUE);
|
|
});
|
|
|
|
test('users can link to docs page for target', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
await visit(urls.projectScope);
|
|
|
|
await click(commonSelectors.HREF(urls.targets));
|
|
|
|
assert
|
|
.dom(
|
|
commonSelectors.HREF(
|
|
'https://developer.hashicorp.com/boundary/docs/concepts/domain-model/targets',
|
|
),
|
|
)
|
|
.isVisible();
|
|
});
|
|
|
|
test('users can navigate to target and incorrect url auto-corrects', async function (assert) {
|
|
const incorrectUrl = `/scopes/${instances.scopes.org.id}/targets/${instances.sshTarget.id}`;
|
|
|
|
await visit(incorrectUrl);
|
|
|
|
assert.notEqual(currentURL(), incorrectUrl);
|
|
assert.strictEqual(currentURL(), urls.sshTarget);
|
|
});
|
|
|
|
test('can view aliases on the right sidebar', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
instances.tcpTarget.update({
|
|
aliases: [{ id: aliasResource.id, value: aliasResource.value }],
|
|
});
|
|
await visit(urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.tcpTarget));
|
|
|
|
assert.dom(selectors.ALIASES_SIDEBAR).isVisible();
|
|
assert.dom(selectors.ALIASES_SIDEBAR_LIST).isVisible();
|
|
assert.dom(selectors.ALIASES_SIDEBAR_LIST).hasText('alias 1');
|
|
});
|
|
|
|
test('cannot view aliases list on the right sidebar if there is no alias associated with the target', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
aliasResource.authorized_collection_actions = ['create'];
|
|
await visit(urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.tcpTarget));
|
|
|
|
assert.dom(selectors.ALIASES_SIDEBAR).isVisible();
|
|
assert
|
|
.dom(selectors.ALIASES_NEW_LINK)
|
|
.hasText(selectors.ALIASES_NEW_LINK_TEXT);
|
|
assert.dom(selectors.ALIASES_SIDEBAR_LIST).doesNotExist();
|
|
});
|
|
|
|
test('user should not see add a new alias button without proper auth ', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
instances.scopes.global.authorized_collection_actions['aliases'] =
|
|
instances.scopes.global.authorized_collection_actions['aliases'].filter(
|
|
(item) => item !== 'create',
|
|
);
|
|
await visit(urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.tcpTarget));
|
|
|
|
assert.dom(selectors.ALIASES_SIDEBAR).doesNotExist();
|
|
assert.dom(selectors.ALIASES_NEW_LINK).doesNotExist();
|
|
assert.dom(selectors.ALIASES_SIDEBAR_LIST).doesNotExist();
|
|
});
|
|
|
|
test('can click `view more aliases` to see the remaining associated aliases if there are more than 3', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-01
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
instances.tcpTarget.update({
|
|
aliases: [
|
|
{ id: aliasResource.id, value: 'alias 1' },
|
|
{ id: aliasResource.id, value: 'alias 5' },
|
|
{ id: aliasResource.id, value: 'alias 2' },
|
|
{ id: aliasResource.id, value: 'alias 4' },
|
|
],
|
|
});
|
|
await visit(urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.tcpTarget));
|
|
|
|
assert.dom(selectors.ALIASES_SIDEBAR).isVisible();
|
|
assert.dom(selectors.ALIASES_VIEW_MORE_BTN).isVisible();
|
|
|
|
await click(selectors.ALIASES_VIEW_MORE_BTN);
|
|
|
|
assert.dom(selectors.ALIASES_FLYOUT).isVisible();
|
|
});
|
|
|
|
test('cannot navigate to a rdp target form without proper authorization', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-26
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
featuresService.enable('rdp-target');
|
|
instances.rdpTarget.authorized_actions =
|
|
instances.rdpTarget.authorized_actions.filter((item) => item !== 'read');
|
|
|
|
await visit(urls.projectScope);
|
|
|
|
assert.dom(commonSelectors.TABLE_RESOURCE_LINK(urls.tcpTarget)).isVisible();
|
|
assert
|
|
.dom(commonSelectors.TABLE_RESOURCE_LINK(urls.rdpTarget))
|
|
.doesNotExist();
|
|
});
|
|
|
|
test('visiting rdp target', async function (assert) {
|
|
setRunOptions({
|
|
rules: {
|
|
'color-contrast': {
|
|
// [ember-a11y-ignore]: axe rule "color-contrast" automatically ignored on 2025-08-26
|
|
enabled: false,
|
|
},
|
|
},
|
|
});
|
|
|
|
featuresService.enable('rdp-target');
|
|
await visit(urls.projectScope);
|
|
|
|
await click(commonSelectors.HREF(urls.targets));
|
|
|
|
assert.strictEqual(currentURL(), urls.targets);
|
|
|
|
await click(commonSelectors.HREF(urls.rdpTarget));
|
|
|
|
assert.strictEqual(currentURL(), urls.rdpTarget);
|
|
});
|
|
});
|