-
Notifications
You must be signed in to change notification settings - Fork 0
/
policy_test.go
75 lines (66 loc) · 1.8 KB
/
policy_test.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
package ladon_test
import (
"encoding/json"
"fmt"
"testing"
. "github.com/ory/ladon"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
)
var policyConditions = Conditions{
"owner": &EqualsSubjectCondition{},
}
var policyCases = []*DefaultPolicy{
{
ID: "1",
Description: "description",
Subjects: []string{"user"},
Effect: AllowAccess,
Resources: []string{"articles:<[0-9]+>"},
Actions: []string{"create", "update"},
Conditions: policyConditions,
},
{
Effect: DenyAccess,
Conditions: make(Conditions),
},
}
func TestHasAccess(t *testing.T) {
assert.True(t, policyCases[0].AllowAccess())
assert.False(t, policyCases[1].AllowAccess())
}
func TestMarshalling(t *testing.T) {
for k, c := range policyCases {
t.Run(fmt.Sprintf("case=%d", k), func(t *testing.T) {
var cc = DefaultPolicy{
Conditions: make(Conditions),
}
data, err := json.Marshal(c)
RequireError(t, false, err)
json.Unmarshal(data, &cc)
RequireError(t, false, err)
assert.Equal(t, c, &cc)
})
}
}
func TestGetters(t *testing.T) {
for _, c := range policyCases {
assert.Equal(t, c.ID, c.GetID())
assert.Equal(t, c.Description, c.GetDescription())
assert.Equal(t, c.Resources, c.GetResources())
assert.Equal(t, c.Subjects, c.GetSubjects())
assert.Equal(t, len(c.Conditions), len(c.GetConditions()))
assert.Equal(t, c.Effect, c.GetEffect())
assert.Equal(t, c.Actions, c.GetActions())
assert.Equal(t, byte('<'), c.GetStartDelimiter())
assert.Equal(t, byte('>'), c.GetEndDelimiter())
}
}
func RequireError(t *testing.T, expectError bool, err error, args ...interface{}) {
if err != nil && !expectError {
t.Logf("Unexpected error: %s\n", err.Error())
t.Logf("Arguments: %v\n", args)
t.Logf("\n\n")
}
require.Equal(t, expectError, err != nil)
}