78 lines
3.1 KiB
JavaScript
78 lines
3.1 KiB
JavaScript
import { module, test } from 'qunit';
|
|
import { setupTest } from 'ember-qunit';
|
|
|
|
module('Unit | Abilities | credential', function (hooks) {
|
|
setupTest(hooks);
|
|
|
|
let features;
|
|
|
|
hooks.beforeEach(function () {
|
|
// Enable json-credentials feature by default
|
|
features = this.owner.lookup('service:features');
|
|
features.enable('json-credentials');
|
|
});
|
|
|
|
test('can read credentials, including JSON credentials, when authorized and json-credentials feature is enabled', function (assert) {
|
|
assert.expect(3);
|
|
const service = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const credential = store.createRecord('credential', {
|
|
authorized_actions: ['read'],
|
|
type: 'json',
|
|
});
|
|
assert.true(service.can('read credential', credential));
|
|
credential.type = 'username_password';
|
|
assert.true(service.can('read credential', credential));
|
|
credential.type = 'ssh_private_key';
|
|
assert.true(service.can('read credential', credential));
|
|
});
|
|
|
|
test('cannot read credentials, including JSON credentials, when unauthorized and json-credentials feature is enabled', function (assert) {
|
|
assert.expect(3);
|
|
const service = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const credential = store.createRecord('credential', {
|
|
authorized_actions: [],
|
|
type: 'json',
|
|
});
|
|
assert.false(service.can('read credential', credential));
|
|
credential.type = 'username_password';
|
|
assert.false(service.can('read credential', credential));
|
|
credential.type = 'ssh_private_key';
|
|
assert.false(service.can('read credential', credential));
|
|
});
|
|
|
|
test('cannot read credentials, including JSON credentials, when unauthorized and json-credentials feature is disabled', function (assert) {
|
|
assert.expect(3);
|
|
const service = this.owner.lookup('service:can');
|
|
const featuresService = this.owner.lookup('service:features');
|
|
featuresService.disable('json-credentials');
|
|
const store = this.owner.lookup('service:store');
|
|
const credential = store.createRecord('credential', {
|
|
authorized_actions: [],
|
|
type: 'json',
|
|
});
|
|
assert.false(service.can('read credential', credential));
|
|
credential.type = 'username_password';
|
|
assert.false(service.can('read credential', credential));
|
|
credential.type = 'ssh_private_key';
|
|
assert.false(service.can('read credential', credential));
|
|
});
|
|
|
|
test('can read credentials, excepting JSON credentials, when authorized and json-credentials feature is disabled', function (assert) {
|
|
assert.expect(3);
|
|
features.disable('json-credentials');
|
|
const service = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const credential = store.createRecord('credential', {
|
|
authorized_actions: ['read'],
|
|
type: 'json',
|
|
});
|
|
assert.false(service.can('read credential', credential));
|
|
credential.type = 'username_password';
|
|
assert.true(service.can('read credential', credential));
|
|
credential.type = 'ssh_private_key';
|
|
assert.true(service.can('read credential', credential));
|
|
});
|
|
});
|