68 lines
2.3 KiB
JavaScript
68 lines
2.3 KiB
JavaScript
'use strict';
|
|
|
|
require('../helper');
|
|
|
|
var server = require('../../lib/server')();
|
|
var assert = require('../support/assert');
|
|
|
|
describe('app.auth', function() {
|
|
|
|
var scenarios = [
|
|
{
|
|
desc: 'no api key should fallback to default api key',
|
|
url: "/api/v1/sql?q=SELECT%20*%20FROM%20untitle_table_4",
|
|
statusCode: 200
|
|
},
|
|
{
|
|
desc: 'invalid api key should return 401',
|
|
url: "/api/v1/sql?api_key=THIS_API_KEY_NOT_EXIST&q=SELECT%20*%20FROM%20untitle_table_4",
|
|
statusCode: 401
|
|
},
|
|
{
|
|
desc: 'valid api key should allow insert in protected tables',
|
|
url: "/api/v1/sql?api_key=1234&q=INSERT%20INTO%20private_table%20(name)%20VALUES%20('app_auth_test1')",
|
|
statusCode: 200
|
|
},
|
|
{
|
|
desc: 'valid api key should allow delete in protected tables',
|
|
url: "/api/v1/sql?api_key=1234&q=DELETE%20FROM%20private_table%20WHERE%20name%3d'app_auth_test1'",
|
|
statusCode: 200
|
|
},
|
|
{
|
|
desc: 'invalid api key should NOT allow insert in protected tables',
|
|
url: "/api/v1/sql?api_key=THIS_API_KEY_NOT_EXIST&q=INSERT%20INTO%20private_table%20(name)%20VALUES%20('R')",
|
|
statusCode: 401
|
|
},
|
|
{
|
|
desc: 'no api key should NOT allow insert in protected tables',
|
|
url: "/api/v1/sql?q=INSERT%20INTO%20private_table%20(name)%20VALUES%20('RAMBO')",
|
|
statusCode: 403
|
|
},
|
|
{
|
|
desc: 'no api key should NOT allow insert in public tables',
|
|
url: "/api/v1/sql?q=INSERT%20INTO%20untitle_table_4%20(name)%20VALUES%20('RAMBO')",
|
|
statusCode: 403
|
|
}
|
|
];
|
|
|
|
scenarios.forEach(function(scenario) {
|
|
it(scenario.desc, function(done) {
|
|
assert.response(server, {
|
|
// view prepare_db.sh to find public table name and structure
|
|
url: scenario.url,
|
|
headers: {
|
|
host: 'vizzuality.cartodb.com'
|
|
},
|
|
method: 'GET'
|
|
},
|
|
{},
|
|
function(err, res) {
|
|
assert.equal(res.statusCode, scenario.statusCode, res.statusCode + ': ' + res.body);
|
|
done();
|
|
}
|
|
);
|
|
});
|
|
});
|
|
|
|
});
|