import { MethodModesExtractor } from '../../../../src/authorization/permissions/MethodModesExtractor'; import type { AccessMap } from '../../../../src/authorization/permissions/Permissions'; import { AccessMode } from '../../../../src/authorization/permissions/Permissions'; import type { Operation } from '../../../../src/http/Operation'; import { BasicRepresentation } from '../../../../src/http/representation/BasicRepresentation'; import type { ResourceIdentifier } from '../../../../src/http/representation/ResourceIdentifier'; import type { ResourceSet } from '../../../../src/storage/ResourceSet'; import { NotImplementedHttpError } from '../../../../src/util/errors/NotImplementedHttpError'; import { IdentifierSetMultiMap } from '../../../../src/util/map/IdentifierMap'; import { compareMaps } from '../../../util/Util'; describe('A MethodModesExtractor', (): void => { const target: ResourceIdentifier = { path: 'http://example.com/foo' }; const operation: Operation = { method: 'GET', target, preferences: {}, body: new BasicRepresentation(), }; let resourceSet: jest.Mocked; let extractor: MethodModesExtractor; function getMap(modes: AccessMode[], identifier?: ResourceIdentifier): AccessMap { return new IdentifierSetMultiMap( modes.map((mode): [ResourceIdentifier, AccessMode] => [ identifier ?? target, mode ]), ); } beforeEach(async(): Promise => { resourceSet = { hasResource: jest.fn().mockResolvedValue(true), }; extractor = new MethodModesExtractor(resourceSet); }); it('can handle HEAD/GET/POST/PUT/DELETE.', async(): Promise => { await expect(extractor.canHandle({ ...operation, method: 'HEAD' })).resolves.toBeUndefined(); await expect(extractor.canHandle({ ...operation, method: 'GET' })).resolves.toBeUndefined(); await expect(extractor.canHandle({ ...operation, method: 'POST' })).resolves.toBeUndefined(); await expect(extractor.canHandle({ ...operation, method: 'PUT' })).resolves.toBeUndefined(); await expect(extractor.canHandle({ ...operation, method: 'DELETE' })).resolves.toBeUndefined(); await expect(extractor.canHandle({ ...operation, method: 'PATCH' })).rejects.toThrow(NotImplementedHttpError); }); it('requires read for HEAD operations.', async(): Promise => { compareMaps(await extractor.handle({ ...operation, method: 'HEAD' }), getMap([ AccessMode.read ])); }); it('requires read for GET operations.', async(): Promise => { compareMaps(await extractor.handle({ ...operation, method: 'GET' }), getMap([ AccessMode.read ])); }); it('requires append for POST operations.', async(): Promise => { compareMaps(await extractor.handle({ ...operation, method: 'POST' }), getMap([ AccessMode.append ])); }); it('requires write for PUT operations.', async(): Promise => { compareMaps(await extractor.handle({ ...operation, method: 'PUT' }), getMap([ AccessMode.write ])); }); it('requires create for PUT operations if the target does not exist.', async(): Promise => { resourceSet.hasResource.mockResolvedValueOnce(false); compareMaps(await extractor.handle({ ...operation, method: 'PUT' }), getMap([ AccessMode.write, AccessMode.create ])); }); it('requires delete for DELETE operations.', async(): Promise => { compareMaps(await extractor.handle({ ...operation, method: 'DELETE' }), getMap([ AccessMode.delete ])); }); it('also requires read for DELETE operations on containers.', async(): Promise => { const identifier = { path: 'http://example.com/foo/' }; compareMaps(await extractor.handle({ ...operation, method: 'DELETE', target: identifier }), getMap([ AccessMode.delete, AccessMode.read ], identifier)); }); });