106 lines
3.1 KiB
JavaScript
106 lines
3.1 KiB
JavaScript
require('../../support/test_helper');
|
|
|
|
var assert = require('assert');
|
|
var RedisPool = require('redis-mpool');
|
|
|
|
var TemplateMaps = require('../../../lib/cartodb/backends/template_maps');
|
|
|
|
describe('template_maps_auth', function() {
|
|
|
|
// configure redis pool instance to use in tests
|
|
var redisPool = new RedisPool(global.environment.redis),
|
|
templateMaps = new TemplateMaps(redisPool, {max_user_templates: 1000});
|
|
|
|
function makeTemplate(method, validTokens) {
|
|
var template = {
|
|
name: 'wadus_template',
|
|
auth: {
|
|
method: method
|
|
}
|
|
};
|
|
|
|
if (method === 'token') {
|
|
template.auth.valid_tokens = validTokens || [];
|
|
}
|
|
|
|
return template;
|
|
}
|
|
|
|
var methodToken = 'token',
|
|
methodOpen = 'open';
|
|
|
|
var tokenFoo = 'foo',
|
|
tokenBar = 'bar';
|
|
|
|
var authorizationTestScenarios = [
|
|
{
|
|
desc: 'open method is always authorized',
|
|
template: makeTemplate(methodOpen),
|
|
token: undefined,
|
|
expected: true
|
|
},
|
|
{
|
|
desc: 'token method is authorized for valid token',
|
|
template: makeTemplate(methodToken, [tokenFoo]),
|
|
token: tokenFoo,
|
|
expected: true
|
|
},
|
|
{
|
|
desc: 'token method not authorized for invalid token',
|
|
template: makeTemplate(methodToken, [tokenFoo]),
|
|
token: tokenBar,
|
|
expected: false
|
|
},
|
|
{
|
|
desc: 'token method is authorized for valid token array',
|
|
template: makeTemplate(methodToken, [tokenFoo]),
|
|
token: [tokenFoo],
|
|
expected: true
|
|
},
|
|
{
|
|
desc: 'token method not authorized for invalid token array',
|
|
template: makeTemplate(methodToken, [tokenFoo]),
|
|
token: [tokenBar],
|
|
expected: false
|
|
},
|
|
{
|
|
desc: 'wadus method not authorized',
|
|
template: makeTemplate('wadus', [tokenFoo]),
|
|
token: tokenFoo,
|
|
expected: false
|
|
},
|
|
{
|
|
desc: 'undefined template result in not authorized',
|
|
template: undefined,
|
|
token: tokenFoo,
|
|
expected: false
|
|
},
|
|
{
|
|
desc: 'undefined template auth result in not authorized',
|
|
template: {},
|
|
token: tokenFoo,
|
|
expected: false
|
|
}
|
|
];
|
|
|
|
authorizationTestScenarios.forEach(function(testScenario) {
|
|
it(testScenario.desc, function(done) {
|
|
var debugMessage = testScenario.expected ? 'should be authorized' : 'unexpectedly authorized';
|
|
var result = templateMaps.isAuthorized(testScenario.template, testScenario.token);
|
|
assert.equal(result, testScenario.expected, debugMessage);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it("auth as 'open' string is authorized", function(done) {
|
|
var template = {
|
|
name: 'wadus_template',
|
|
auth: 'open'
|
|
};
|
|
|
|
assert.ok(templateMaps.isAuthorized(template));
|
|
done();
|
|
});
|
|
|
|
});
|