threshold-ui/ui/admin/tests/unit/controllers/scopes/scope/auth-methods/index-test.js

/**
 * Copyright IBM Corp. 2021, 2026
 * SPDX-License-Identifier: BUSL-1.1
 */

import { module, test } from 'qunit';
import { setupTest } from 'ember-qunit';
import { waitUntil } from '@ember/test-helpers';
import { visit } from '@ember/test-helpers';
import { setupMirage } from 'admin/tests/helpers/mirage';
import { setupSqlite } from 'api/test-support/helpers/sqlite';
import { setupIntl } from 'ember-intl/test-support';
import { authenticateSession } from 'ember-simple-auth/test-support';
import {
  TYPE_AUTH_METHOD_PASSWORD,
  TYPE_AUTH_METHOD_OIDC,
  TYPE_AUTH_METHOD_LDAP,
} from 'api/models/auth-method';

module('Unit | Controller | scopes/scope/auth-methods/index', function (hooks) {
  setupTest(hooks);
  setupMirage(hooks);
  setupSqlite(hooks);
  setupIntl(hooks, 'en-us');

  let intl;
  let store;
  let controller;
  let getAuthMethodCount;

  const instances = {
    scopes: {
      global: null,
    },
    authMethod: null,
  };

  const urls = {
    authMethods: null,
  };

  hooks.beforeEach(async function () {
    intl = this.owner.lookup('service:intl');
    store = this.owner.lookup('service:store');
    controller = this.owner.lookup(
      'controller:scopes/scope/auth-methods/index',
    );

    instances.scopes.global = this.server.create(
      'scope',
      { id: 'global' },
      'withGlobalAuth',
    );
    instances.authMethod = this.server.schema.authMethods.first();
    await authenticateSession({
      isGlobal: true,
      account_id: this.server.schema.accounts.first().id,
    });

    urls.authMethods = '/scopes/global/auth-methods';

    getAuthMethodCount = () =>
      this.server.schema.authMethods.all().models.length;
  });

  test('controller exists', function (assert) {
    assert.ok(controller);
  });

  test('primaryOptions returns expected object', function (assert) {
    assert.deepEqual(controller.primaryOptions, [
      { id: 'true', name: 'Yes' },
      { id: 'false', name: 'No' },
    ]);
  });

  test('authMethodTypeOptions returns expected object', function (assert) {
    assert.deepEqual(controller.authMethodTypeOptions, [
      { id: TYPE_AUTH_METHOD_PASSWORD, name: 'Password' },
      { id: TYPE_AUTH_METHOD_OIDC, name: 'OIDC' },
      { id: TYPE_AUTH_METHOD_LDAP, name: 'LDAP' },
    ]);
  });

  test('filters returns expected entries', function (assert) {
    assert.ok(controller.filters.allFilters);
    assert.ok(controller.filters.selectedFilters);
  });

  test('handleSearchInput action sets expected values correctly', async function (assert) {
    const searchValue = 'test';
    controller.handleSearchInput({ target: { value: searchValue } });
    await waitUntil(() => controller.search === searchValue);

    assert.strictEqual(controller.page, 1);
    assert.strictEqual(controller.search, searchValue);
  });

  test('applyFilter action sets expected values correctly', async function (assert) {
    const selectedItems = ['true'];
    controller.applyFilter('primary', selectedItems);

    assert.strictEqual(controller.page, 1);
    assert.deepEqual(controller.primary, selectedItems);
  });

  test('cancel action rolls-back changes on the specified model', async function (assert) {
    await visit(urls.authMethods);
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );
    authMethod.name = 'test';

    assert.strictEqual(authMethod.name, 'test');

    await controller.cancel(authMethod);

    assert.notEqual(authMethod.name, 'test');
  });

  test('save action saves changes on the specified model', async function (assert) {
    await visit(urls.authMethods);
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );
    authMethod.name = 'test';

    await controller.save(authMethod);

    assert.strictEqual(authMethod.name, 'test');
  });

  test('delete action destroys specified model', async function (assert) {
    await visit('/scopes/global/scopes');
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );
    const authMethodCount = getAuthMethodCount();

    await controller.delete(authMethod);

    assert.strictEqual(getAuthMethodCount(), authMethodCount - 1);
  });

  test('makePrimary action updates scope with auth-method id', async function (assert) {
    await visit(urls.authMethods);
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );

    await controller.makePrimary(authMethod);
    const scope = await store.findRecord('scope', instances.scopes.global.id);

    assert.strictEqual(scope.primary_auth_method_id, instances.authMethod.id);
  });

  test('removeAsPrimary action updates scope with null as auth-method id', async function (assert) {
    await visit(urls.authMethods);
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );

    await controller.removeAsPrimary(authMethod);
    const scope = await store.findRecord('scope', instances.scopes.global.id);

    assert.notOk(scope.primary_auth_method_id);
  });

  test('addStringItem action adds item to field and removeItemByIndex removes correct item', async function (assert) {
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );

    controller.addStringItem(authMethod, 'certificates', 'cert_123');

    assert.deepEqual(authMethod.certificates, [{ value: 'cert_123' }]);

    controller.addStringItem(authMethod, 'certificates', 'cert_456');
    controller.removeItemByIndex(authMethod, 'certificates', 0);

    assert.deepEqual(authMethod.certificates, [{ value: 'cert_456' }]);
  });

  test('addAccountMapItem action adds item to field and removeItemByIndex removes correct item', async function (assert) {
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );

    controller.addAccountMapItem(
      authMethod,
      'account_attribute_maps',
      'name123',
      'fullName',
    );

    assert.deepEqual(authMethod.account_attribute_maps, [
      { from: 'name123', to: 'fullName' },
    ]);

    controller.addAccountMapItem(
      authMethod,
      'account_attribute_maps',
      'name456',
      'fullName',
    );
    controller.removeItemByIndex(authMethod, 'account_attribute_maps', 0);

    assert.deepEqual(authMethod.account_attribute_maps, [
      { from: 'name456', to: 'fullName' },
    ]);
  });

  test('edit action updates to a dirty state', async function (assert) {
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );

    assert.false(authMethod.hasDirtyAttributes);

    controller.edit(authMethod);

    assert.true(authMethod.hasDirtyAttributes);
  });

  test('changeState action updates state of auth-method', async function (assert) {
    instances.authMethod.update({ type: TYPE_AUTH_METHOD_LDAP });
    const authMethod = await store.findRecord(
      'auth-method',
      instances.authMethod.id,
    );

    assert.notOk(authMethod.state);

    await controller.changeState(authMethod, 'public');

    assert.strictEqual(authMethod.state, 'public');
  });

  test('messageDescription returns correct translation with list authorization', async function (assert) {
    await visit(urls.authMethods);

    assert.strictEqual(
      controller.messageDescription,
      intl.t('resources.auth-method.description'),
    );
  });

  test('messageDescription returns correct translation with create authorization', async function (assert) {
    instances.scopes.global.authorized_collection_actions['auth-methods'] = [
      'create',
    ];
    await visit(urls.authMethods);

    assert.strictEqual(
      controller.messageDescription,
      intl.t('descriptions.create-but-not-list', {
        resource: intl.t('resources.auth-method.title_plural'),
      }),
    );
  });

  test('messageDescription returns correct translation with no authorization', async function (assert) {
    instances.scopes.global.authorized_collection_actions['auth-methods'] = [];
    await visit(urls.authMethods);

    assert.strictEqual(
      controller.messageDescription,
      intl.t('descriptions.neither-list-nor-create', {
        resource: intl.t('resources.auth-method.title_plural'),
      }),
    );
  });
});