vault/ui/tests/unit/adapters/capabilities-test.js

/**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: BUSL-1.1
 */

import { resolve } from 'rsvp';
import { module, test } from 'qunit';
import { setupTest } from 'ember-qunit';

module('Unit | Adapter | capabilities', function (hooks) {
  setupTest(hooks);

  module('findRecord', function () {
    test('it calls the correct url', function (assert) {
      let url, method, options;
      const adapter = this.owner.factoryFor('adapter:capabilities').create({
        ajax: (...args) => {
          [url, method, options] = args;
          return resolve();
        },
      });

      adapter.findRecord(null, 'capabilities', 'foo');
      assert.strictEqual(url, '/v1/sys/capabilities-self', 'calls the correct URL');
      assert.deepEqual(options.data, { paths: ['foo'] }, 'data params OK');
      assert.strictEqual(method, 'POST', 'method OK');
    });

    test('enterprise calls the correct url within namespace when userRoot = root', function (assert) {
      const namespaceSvc = this.owner.lookup('service:namespace');
      namespaceSvc.setNamespace('admin');

      let url, method, options;
      const adapter = this.owner.factoryFor('adapter:capabilities').create({
        ajax: (...args) => {
          [url, method, options] = args;
          return resolve();
        },
      });

      adapter.findRecord(null, 'capabilities', 'foo');
      assert.strictEqual(url, '/v1/sys/capabilities-self', 'calls the correct URL');
      assert.deepEqual(options.data, { paths: ['admin/foo'] }, 'data params prefix paths with namespace');
      assert.strictEqual(options.namespace, '', 'sent with root namespace');
      assert.strictEqual(method, 'POST', 'method OK');
    });

    test('enterprise calls the correct url within namespace when userRoot is not root', function (assert) {
      const namespaceSvc = this.owner.lookup('service:namespace');
      const auth = this.owner.lookup('service:auth');
      namespaceSvc.setNamespace('admin/bar/baz');
      // Set user root namespace
      auth.setCluster('1');
      auth.set('tokens', ['vault-_root_☃1']);
      auth.setTokenData('vault-_root_☃1', {
        userRootNamespace: 'admin/bar',
        backend: { mountPath: 'token' },
      });

      let url, method, options;
      const adapter = this.owner.factoryFor('adapter:capabilities').create({
        ajax: (...args) => {
          [url, method, options] = args;
          return resolve();
        },
      });

      adapter.findRecord(null, 'capabilities', 'foo');
      assert.strictEqual(url, '/v1/sys/capabilities-self', 'calls the correct URL');
      assert.deepEqual(
        options.data,
        { paths: ['baz/foo'] },
        'data params prefix path with relative namespace'
      );
      assert.strictEqual(options.namespace, 'admin/bar', 'sent with root namespace');
      assert.strictEqual(method, 'POST', 'method OK');
    });
  });

  module('query', function () {
    test('it calls the correct url', function (assert) {
      let url, method, options;
      const adapter = this.owner.factoryFor('adapter:capabilities').create({
        ajax: (...args) => {
          [url, method, options] = args;
          return resolve();
        },
      });

      adapter.query(null, 'capabilities', { paths: ['foo', 'my/path'] });
      assert.strictEqual(url, '/v1/sys/capabilities-self', 'calls the correct URL');
      assert.deepEqual(options.data, { paths: ['foo', 'my/path'] }, 'data params OK');
      assert.strictEqual(method, 'POST', 'method OK');
    });

    test('enterprise calls the correct url within namespace when userRoot = root', function (assert) {
      const namespaceSvc = this.owner.lookup('service:namespace');
      namespaceSvc.setNamespace('admin');

      let url, method, options;
      const adapter = this.owner.factoryFor('adapter:capabilities').create({
        ajax: (...args) => {
          [url, method, options] = args;
          return resolve();
        },
      });

      adapter.query(null, 'capabilities', { paths: ['foo', 'my/path'] });
      assert.strictEqual(url, '/v1/sys/capabilities-self', 'calls the correct URL');
      assert.deepEqual(
        options.data,
        { paths: ['admin/foo', 'admin/my/path'] },
        'data params prefix paths with namespace'
      );
      assert.strictEqual(options.namespace, '', 'sent with root namespace');
      assert.strictEqual(method, 'POST', 'method OK');
    });

    test('enterprise calls the correct url within namespace when userRoot is not root', function (assert) {
      const namespaceSvc = this.owner.lookup('service:namespace');
      const auth = this.owner.lookup('service:auth');
      namespaceSvc.setNamespace('admin/bar/baz');
      // Set user root namespace
      auth.setCluster('1');
      auth.set('tokens', ['vault-_root_☃1']);
      auth.setTokenData('vault-_root_☃1', {
        userRootNamespace: 'admin/bar',
        backend: { mountPath: 'token' },
      });

      let url, method, options;
      const adapter = this.owner.factoryFor('adapter:capabilities').create({
        ajax: (...args) => {
          [url, method, options] = args;
          return resolve();
        },
      });

      adapter.query(null, 'capabilities', { paths: ['foo', 'my/path'] });
      assert.strictEqual(url, '/v1/sys/capabilities-self', 'calls the correct URL');
      assert.deepEqual(
        options.data,
        { paths: ['baz/foo', 'baz/my/path'] },
        'data params prefix path with relative namespace'
      );
      assert.strictEqual(options.namespace, 'admin/bar', 'sent with root namespace');
      assert.strictEqual(method, 'POST', 'method OK');
    });
  });
});