mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-14 10:37:00 +02:00
* adds ldap ember engine (#20786) * adds ldap as mountable and supported secrets engine (#20793) * removes active directory as mountable secrets engine (#20798) * LDAP Config Ember Data Setup (#20863) * adds secret-engine-path adapter * adds model, adapater and serializer for ldap config * adds test for ldap config adapter * addresses PR feedback * updates remaining instances of getURL in secrets-engine-path adapter * adds underscore to getURL method in kubernetes/config adapter * adds check config vars test for kubernetes/config adapter * adds comment regarding primaryKey in secrets-engine-path adapter * adds tab-page-header component for ldap secrets engine (#20941) * LDAP Config Route (#21059) * converts secret-mount-path service to ts and moves kubernetes fetch-config decorator to core addon and converts to ts * adds ldap config route * fixes withConfig import path in kubernetes roles route * updates types in ldap config route * adds unit tests for fetch-secret-config decorator * updates comments in fetch-secret-config decorator * renames fetch-secret-config decorator * LDAP Configure Page Component (#21384) * adds ldap page configure component * removes pauseTest and updates radio card selector in ldap config test * LDAP Configuration (#21430) * adds ldap configuration route * adds secrets-engine-mount-config component to core addon * adds ldap config-cta component * adds display fields to ldap configuration page and test * fixes ldap config-cta test * adds yield to secrets-engine-mount-config component * fixes tests * LDAP Overview Route and Page Component (#21579) * adds ldap overview route and page component * changes toolbar link action type for create role on overview page * LDAP Role Model, Adapter and Serializer (#21655) * adds model, adapter and serializer for ldap roles * addresses review feedback * changes ldap role type from tracked prop to attr and sets in adapter for query methods * adds assertions to verify that frontend only props are returned from query methods in ldap role adapter * LDAP Library Model, Adapter and Serializer (#21728) * adds model, adapter and serializer for ldap library * updates capitalization and punction for ldap role and library form fields * LDAP Roles Create and Edit (#21818) * moves stringify and jsonify helpers to core addon * adds validation error for ttl picker in form field component * adds ldap roles create and edit routes and page component * adds ldap mirage handler and factory for roles * adds example workflow to json editor component * adds tests for ldap page create and edit component * addresses feedback * LDAP Role Details (#22036) * adds ldap role route to pass down model to child routes * adds ldap role details route and page component * updates ldap role model capabilities checks * adds periods to error messages * removes modelFor from ldap roles edit and details routes * adds flash message on ldap role delete success * LDAP Roles (#22070) * adds ldap roles route and page component * update ldap role adapter tests and adds adapter options to query for partialErrorInfo * updates ldap role adapter based on PR feedback * adds filter-input component to core addon * updates ldap roles page to use filter-input component * updates ldap role adapter tests * LDAP Role Credentials (#22142) * adds ldap roles route and page component * update ldap role adapter tests and adds adapter options to query for partialErrorInfo * adds credentials actions to ldap roles list menu and fixes rotate action in details view * adds ldap role credentials route and page component * adds tests for ldap role credentials * LDAP Library Create and Edit (#22171) * adds ldap library create/edit routes and page component * adds ldap library create-and-edit tests and library mirage factory * updates form-field component to display validation errors and warnings for all fields * updates ldap library edit route class name * updates ldap library model interface name * adds missing period in flash message * LDAP Libraries (#22184) * updates interface and class names in ldap roles route * adds ldap libraries route and page component * fixes lint error * LDAP Library Details (#22200) * updates interface and class names in ldap roles route * adds ldap libraries route and page component * fixes lint error * adds ldap library details route and page component * LDAP Library Details Configuration (#22201) * updates interface and class names in ldap roles route * adds ldap libraries route and page component * fixes lint error * adds ldap library details route and page component * adds ldap library details configuration route and page component * updates ldap library check-in enforcement value mapping * fixes issue in code mirror modifier after merging upgrade * fixes failing database secrets test * LDAP Library Account Details (#22287) * adds route and page component for ldap library accounts * adds ldap component for checked out accounts * updates ldap library adapter tests * LDAP Library Check-out (#22289) * adds route and page component for ldap library accounts * adds ldap component for checked out accounts * adds route and page component for ldap library checkout * addresses PR feedback * LDAP Overview Cards (#22325) * adds overview cards to ldap overview route * adds create library toolbar action to ldap overview route * adds acceptance tests for ldap workflows (#22375) * Fetch Secrets Engine Config Decorator Docs (#22416) * removes uneccesary asyncs from ldap route model hooks * updates ldap overview route class name * adds documentation for fetch-secrets-engine-config decorator * add changelog * adding back external links, missed due to merge. * changelog * fix test after merging in dashboard work * Update 20790.txt --------- Co-authored-by: Angel Garbarino <angel@hashicorp.com> Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
148 lines
5.2 KiB
JavaScript
148 lines
5.2 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*/
|
|
|
|
import { module, test } from 'qunit';
|
|
import { setupRenderingTest } from 'ember-qunit';
|
|
import { setupEngine } from 'ember-engines/test-support';
|
|
import { setupMirage } from 'ember-cli-mirage/test-support';
|
|
import { render, click } from '@ember/test-helpers';
|
|
import hbs from 'htmlbars-inline-precompile';
|
|
import { allowAllCapabilitiesStub } from 'vault/tests/helpers/stubs';
|
|
import sinon from 'sinon';
|
|
|
|
module('Integration | Component | ldap | AccountsCheckedOut', function (hooks) {
|
|
setupRenderingTest(hooks);
|
|
setupEngine(hooks, 'ldap');
|
|
setupMirage(hooks);
|
|
|
|
hooks.beforeEach(function () {
|
|
this.server.post('/sys/capabilities-self', allowAllCapabilitiesStub());
|
|
|
|
this.store = this.owner.lookup('service:store');
|
|
this.authStub = sinon.stub(this.owner.lookup('service:auth'), 'authData');
|
|
|
|
this.store.pushPayload('ldap/library', {
|
|
modelName: 'ldap/library',
|
|
backend: 'ldap-test',
|
|
...this.server.create('ldap-library', { name: 'test-library' }),
|
|
});
|
|
this.library = this.store.peekRecord('ldap/library', 'test-library');
|
|
this.statuses = [
|
|
{
|
|
account: 'foo.bar',
|
|
available: false,
|
|
library: 'test-library',
|
|
borrower_client_token: '123',
|
|
borrower_entity_id: '456',
|
|
},
|
|
{ account: 'bar.baz', available: false, library: 'test-library' },
|
|
{ account: 'checked.in', available: true, library: 'test-library' },
|
|
];
|
|
this.renderComponent = () => {
|
|
return render(
|
|
hbs`
|
|
<div id="modal-wormhole"></div>
|
|
<AccountsCheckedOut @libraries={{array this.library}} @statuses={{this.statuses}} @showLibraryColumn={{this.showLibraryColumn}} />
|
|
`,
|
|
{
|
|
owner: this.engine,
|
|
}
|
|
);
|
|
};
|
|
});
|
|
|
|
test('it should render empty state when no accounts are checked out', async function (assert) {
|
|
this.statuses = [
|
|
{ account: 'foo', available: true, library: 'test-library' },
|
|
{ account: 'bar', available: true, library: 'test-library' },
|
|
];
|
|
|
|
await this.renderComponent();
|
|
|
|
assert
|
|
.dom('[data-test-empty-state-title]')
|
|
.hasText('No accounts checked out yet', 'Empty state title renders');
|
|
assert
|
|
.dom('[data-test-empty-state-message]')
|
|
.hasText('There is no account that is currently in use.', 'Empty state message renders');
|
|
});
|
|
|
|
test('it should filter accounts for root user', async function (assert) {
|
|
this.authStub.value({});
|
|
|
|
await this.renderComponent();
|
|
|
|
assert.dom('[data-test-checked-out-account]').exists({ count: 1 }, 'Correct number of accounts render');
|
|
assert
|
|
.dom('[data-test-checked-out-account="bar.baz"]')
|
|
.hasText('bar.baz', 'Account renders that was checked out by root user');
|
|
});
|
|
|
|
test('it should filter accounts for non root user', async function (assert) {
|
|
this.authStub.value({ entity_id: '456' });
|
|
|
|
await this.renderComponent();
|
|
|
|
assert.dom('[data-test-checked-out-account]').exists({ count: 1 }, 'Correct number of accounts render');
|
|
assert
|
|
.dom('[data-test-checked-out-account="foo.bar"]')
|
|
.hasText('foo.bar', 'Account renders that was checked out by non root user');
|
|
});
|
|
|
|
test('it should display all accounts when check-in enforcement is disabled on library', async function (assert) {
|
|
this.library.disable_check_in_enforcement = 'Disabled';
|
|
|
|
await this.renderComponent();
|
|
|
|
assert.dom('[data-test-checked-out-account]').exists({ count: 2 }, 'Correct number of accounts render');
|
|
assert
|
|
.dom('[data-test-checked-out-account="checked.in"]')
|
|
.doesNotExist('checked.in', 'Checked in accounts do not render');
|
|
});
|
|
|
|
test('it should display details in table', async function (assert) {
|
|
this.authStub.value({ entity_id: '456' });
|
|
|
|
await this.renderComponent();
|
|
|
|
assert.dom('[data-test-checked-out-account="foo.bar"]').hasText('foo.bar', 'Account renders');
|
|
assert.dom('[data-test-checked-out-library="foo.bar"]').doesNotExist('Library column is hidden');
|
|
assert
|
|
.dom('[data-test-checked-out-account-action="foo.bar"]')
|
|
.includesText('Check-in', 'Check-in action renders');
|
|
|
|
this.showLibraryColumn = true;
|
|
await this.renderComponent();
|
|
|
|
assert.dom('[data-test-checked-out-library="foo.bar"]').hasText('test-library', 'Library column renders');
|
|
});
|
|
|
|
test('it should check in account', async function (assert) {
|
|
assert.expect(2);
|
|
|
|
const transitionStub = sinon.stub(this.owner.lookup('service:router'), 'transitionTo');
|
|
this.library.disable_check_in_enforcement = 'Disabled';
|
|
|
|
this.server.post('/ldap-test/library/test-library/check-in', (schema, req) => {
|
|
const json = JSON.parse(req.requestBody);
|
|
assert.deepEqual(
|
|
json.service_account_names,
|
|
['foo.bar'],
|
|
'Check-in request made with correct account names'
|
|
);
|
|
});
|
|
|
|
await this.renderComponent();
|
|
|
|
await click('[data-test-checked-out-account-action="foo.bar"]');
|
|
await click('[data-test-check-in-confirm]');
|
|
|
|
const didTransition = transitionStub.calledWith(
|
|
'vault.cluster.secrets.backend.ldap.libraries.library.details.accounts'
|
|
);
|
|
assert.true(didTransition, 'Transitions to accounts route on check-in success');
|
|
});
|
|
});
|