test: add missing public asset tests

1 files changed, 19 insertions, 2 deletions

diff --git a/etc/authzd/policy0.cedar b/etc/authzd/policy0.cedar
index 56457622..75cf8178 100644
--- a/etc/authzd/policy0.cedar
+++ b/etc/authzd/policy0.cedar
@@ -22,11 +22,28 @@ when {
 permit(principal, action, resource)
 when {
   context has host && context has method && context has path && (
-    context.host == "sparkle.staging.runway.gitlab.net" &&
+    context.host == "sparkle.staging.runway.gitlab.net" && (
       context.method == "GET" && (
         context.path == "/" ||
-        context.path == "/app.js" ||
+        context.path == "/callback" ||
+        context.path == "/dashboard/nav" ||
+        context.path == "/health" ||
+        context.path == "/signout" ||
+        context.path == "/sparkles" ||
+        context.path like "*.bmp" ||
+        context.path like "*.css" ||
+        context.path like "*.gif" ||
+        context.path like "*.html" ||
+        context.path like "*.ico" ||
+        context.path like "*.jpeg" ||
+        context.path like "*.jpg" ||
+        context.path like "*.js" ||
+        context.path like "*.png" ||
         context.path == "/callback"
       )
+    ) || (
+      context.method == "POST" && (
+        context.path == "/sparkles/restore"
+    )
   )
 };