summaryrefslogtreecommitdiff
path: root/tests/authorization/cedar_authorizer_test.rs
diff options
context:
space:
mode:
Diffstat (limited to 'tests/authorization/cedar_authorizer_test.rs')
-rw-r--r--tests/authorization/cedar_authorizer_test.rs21
1 files changed, 11 insertions, 10 deletions
diff --git a/tests/authorization/cedar_authorizer_test.rs b/tests/authorization/cedar_authorizer_test.rs
index d6742995..3073417d 100644
--- a/tests/authorization/cedar_authorizer_test.rs
+++ b/tests/authorization/cedar_authorizer_test.rs
@@ -6,9 +6,14 @@ mod tests {
use envoy_types::pb::envoy::service::auth::v3::attribute_context::HttpRequest;
use std::collections::HashMap;
+ fn authorizer() -> CedarAuthorizer {
+ CedarAuthorizer::new_from(
+ "/home/mokhax/src/gitlab.com/gitlab-org/software-supply-chain-security/authorization/authzd/etc/authzd",
+ )
+ }
+
#[test]
fn test_cedar_authorizer_allows_valid_token() {
- let authorizer = CedarAuthorizer::default();
let request = create_request(|item: &mut HttpRequest| {
item.headers = build_with(|item: &mut HashMap<String, String>| {
item.insert(
@@ -18,12 +23,11 @@ mod tests {
});
});
- assert!(authorizer.authorize(request));
+ assert!(authorizer().authorize(request));
}
#[test]
fn test_cedar_authorizer_denies_invalid_token() {
- let authorizer = CedarAuthorizer::default();
let request = create_request(|item: &mut HttpRequest| {
item.headers = build_with(|item: &mut HashMap<String, String>| {
item.insert(
@@ -33,40 +37,37 @@ mod tests {
});
});
- assert!(!authorizer.authorize(request));
+ assert!(!authorizer().authorize(request));
}
#[test]
fn test_cedar_authorizer_denies_missing_header() {
- let authorizer = CedarAuthorizer::default();
let request = create_request(|item: &mut HttpRequest| {
item.headers = HashMap::new();
});
- assert!(!authorizer.authorize(request));
+ assert!(!authorizer().authorize(request));
}
#[test]
fn test_cedar_authorizer_allows_static_assets() {
- let authorizer = CedarAuthorizer::default();
let request = create_request(|item: &mut HttpRequest| {
item.headers = build_with(|item: &mut HashMap<String, String>| {
item.insert(String::from(":path"), String::from("/public/style.css"));
});
});
- assert!(authorizer.authorize(request));
+ assert!(authorizer().authorize(request));
}
#[test]
fn test_cedar_authorizer_allows_js_assets() {
- let authorizer = CedarAuthorizer::default();
let mut headers = HashMap::new();
headers.insert(":path".to_string(), "/app.js".to_string());
let request = create_request(|item: &mut HttpRequest| {
item.headers = headers;
});
- assert!(authorizer.authorize(request));
+ assert!(authorizer().authorize(request));
}
}