blob: b13f48ad65c1069198c05dbb14368945b4389b2d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
#[cfg(test)]
mod tests {
use crate::common::factory_bot::*;
use authzd::Authorizer;
use authzd::CedarAuthorizer;
use envoy_types::pb::envoy::service::auth::v3::attribute_context::HttpRequest;
use std::collections::HashMap;
#[test]
fn test_cedar_authorizer_allows_valid_token() {
let authorizer = CedarAuthorizer::new();
let request = create_request(|item: &mut HttpRequest| {
item.headers = build_with(|item: &mut HashMap<String, String>| {
item.insert(
String::from("authorization"),
String::from("Bearer valid-token"),
);
});
});
assert!(authorizer.authorize(request));
}
#[test]
fn test_cedar_authorizer_denies_invalid_token() {
let authorizer = CedarAuthorizer::new();
let mut headers = HashMap::new();
headers.insert(
"authorization".to_string(),
"Bearer invalid-token".to_string(),
);
let request = create_request(|item: &mut HttpRequest| {
item.headers = headers;
});
let result = authorizer.authorize(request);
assert!(!result);
}
#[test]
fn test_cedar_authorizer_denies_missing_header() {
let authorizer = CedarAuthorizer::new();
let headers = HashMap::new();
let request = create_request(|item: &mut HttpRequest| {
item.headers = headers;
});
let result = authorizer.authorize(request);
assert!(!result);
}
#[test]
fn test_cedar_authorizer_allows_static_assets() {
let authorizer = CedarAuthorizer::new();
let mut headers = HashMap::new();
headers.insert(":path".to_string(), "/public/style.css".to_string());
let request = create_request(|item: &mut HttpRequest| {
item.headers = headers;
});
let result = authorizer.authorize(request);
assert!(result);
}
#[test]
fn test_cedar_authorizer_allows_js_assets() {
let authorizer = CedarAuthorizer::new();
let mut headers = HashMap::new();
headers.insert(":path".to_string(), "/app.js".to_string());
let request = create_request(|item: &mut HttpRequest| {
item.headers = headers;
});
let result = authorizer.authorize(request);
assert!(result);
}
}
|
