esp_sdk 1.1.0 → 2.0.0.rc1

data/test/esp/resources/user_test.rb

@@ -0,0 +1,113 @@
+require File.expand_path(File.dirname(__FILE__) + '/../../test_helper')
+
+module ESP
+  class UserTest < ActiveSupport::TestCase
+    context ESP::User do
+      context '#create' do
+        should 'not be implemented' do
+          assert_raises ESP::NotImplementedError do
+            ESP::User.create(name: 'test')
+          end
+        end
+      end
+
+      context '#update' do
+        should 'not be implemented' do
+          u = build(:user)
+          assert_raises ESP::NotImplementedError do
+            u.save
+          end
+        end
+      end
+
+      context '#destroy' do
+        should 'not be implemented' do
+          u = build(:user)
+          assert_raises ESP::NotImplementedError do
+            u.destroy
+          end
+        end
+      end
+
+      context '#organization' do
+        should 'call the api' do
+          u = build(:user, organization_id: 1)
+          stub_org = stub_request(:get, %r{organizations/#{u.organization_id}.json*}).to_return(body: json(:organization))
+
+          u.organization
+
+          assert_requested(stub_org)
+        end
+      end
+
+      context '#sub_organizations' do
+        should 'call the api' do
+          u = build(:user, sub_organization_ids: [1, 2])
+          stub_request(:get, /sub_organizations.json*/).to_return(body: json_list(:sub_organization, 2))
+
+          u.sub_organizations
+
+          assert_requested(:get, /sub_organizations.json*/) do |req|
+            assert_equal "filter[id_in][0]=#{u.sub_organization_ids.first}&filter[id_in][1]=#{u.sub_organization_ids.second}", URI.unescape(req.uri.query)
+          end
+        end
+      end
+
+      context '#teams' do
+        should 'call the api' do
+          u = build(:user, team_ids: [1, 2])
+          stub_request(:get, /teams.json*/).to_return(body: json_list(:team, 2))
+
+          u.teams
+
+          assert_requested(:get, /teams.json*/) do |req|
+            assert_equal "filter[id_in][0]=#{u.team_ids.first}&filter[id_in][1]=#{u.team_ids.second}", URI.unescape(req.uri.query)
+          end
+        end
+      end
+
+      context 'live calls' do
+        setup do
+          skip "Make sure you run the live calls locally to ensure proper integration" if ENV['CI_SERVER']
+          WebMock.allow_net_connect!
+        end
+
+        teardown do
+          WebMock.disable_net_connect!
+        end
+
+        context '#organization' do
+          should 'return an organization' do
+            u = ESP::User.last
+
+            org = u.organization
+
+            assert_equal u.organization_id, org.id
+          end
+        end
+
+        context '#sub_organizations' do
+          should 'return an array of sub_organizations' do
+            u = ESP::User.last
+
+            sub_orgs = u.sub_organizations
+
+            assert_equal u.sub_organization_ids.count, sub_orgs.count
+            assert_equal u.sub_organization_ids, sub_orgs.map(&:id)
+          end
+        end
+
+        context '#teams' do
+          should 'return an array of teams' do
+            u = ESP::User.last
+
+            teams = u.teams
+
+            assert_equal u.team_ids.count, teams.count
+            assert_equal u.team_ids.sort, teams.map(&:id).sort
+          end
+        end
+      end
+    end
+  end
+end

data/test/esp_test.rb

@@ -0,0 +1,139 @@
+require File.expand_path(File.dirname(__FILE__) + '/test_helper')
+
+class ESPTest < ActiveSupport::TestCase
+  context ESP do
+    setup do
+      @original_access_key_id = ESP.access_key_id
+      @original_secret_access_key = ESP.secret_access_key
+    end
+
+    teardown do
+      ESP.access_key_id = @original_access_key_id
+      ESP.secret_access_key = @original_secret_access_key
+    end
+
+    context '.access_key_id' do
+      should 'be set manually' do
+        ESP.access_key_id = '1234'
+
+        assert_equal '1234', ESP.access_key_id
+        assert_equal '1234', ESP::Resource.hmac_access_id
+      end
+
+      should 'be set from an environment variable' do
+        ESP.access_key_id = nil
+        ENV['ESP_ACCESS_KEY_ID'] = '4321'
+
+        assert_equal '4321', ESP.access_key_id
+      end
+    end
+
+    context '.secret_access_key' do
+      should 'be set manually' do
+        ESP.secret_access_key = '1234'
+
+        assert_equal '1234', ESP.secret_access_key
+        assert_equal '1234', ESP::Resource.hmac_secret_key
+      end
+
+      should 'be set from an environment variable' do
+        ESP.secret_access_key = nil
+        ENV['ESP_SECRET_ACCESS_KEY'] = '4321'
+
+        assert_equal '4321', ESP.secret_access_key
+      end
+    end
+
+    context '.host=' do
+      setup do
+        ESP.host = nil
+      end
+
+      teardown do
+        ESP.host = nil
+        ENV['ESP_HOST'] = nil
+      end
+
+      should 'set ESP::Resource.site' do
+        ESP.host = 'http://sample.com'
+
+        assert_equal URI.parse("http://sample.com#{ESP::PATH}"), ESP::Resource.site
+      end
+    end
+
+    context '.site' do
+      setup do
+        ESP.host = nil
+      end
+
+      teardown do
+        ESP.host = nil
+        ENV['ESP_HOST'] = nil
+      end
+
+      should "return manually set host with path when set" do
+        ESP.host = 'http://sample.com'
+
+        assert_equal URI.parse("http://sample.com#{ESP::PATH}"), ESP::Resource.site
+      end
+
+      should 'should return the test host with path' do
+        assert_equal "#{ESP::HOST[ESP.env.to_sym]}#{ESP::PATH}", ESP.site
+      end
+
+      should "return ENV['ESP_HOST'] with path when in appliance env" do
+        ENV['ESP_HOST'] = 'https://sample.com'
+        ESP.stubs(:env).returns('appliance')
+        assert_equal "https://sample.com#{ESP::PATH}", ESP.site
+      end
+    end
+
+    context '.configure' do
+      setup do
+        ESP.host = nil
+      end
+
+      teardown do
+        ESP.host = nil
+      end
+
+      should 'set site, access_key_id, secret_access_key' do
+        ESP.configure do |config|
+          config.host = 'https://sample.com'
+          config.access_key_id = '1234'
+          config.secret_access_key = '5678'
+        end
+
+        assert_equal "https://sample.com#{ESP::PATH}", ESP.site
+        assert_equal URI.parse("https://sample.com#{ESP::PATH}"), ESP::Resource.site
+        assert_equal '1234', ESP.access_key_id
+        assert_equal '1234', ESP::Resource.hmac_access_id
+        assert_equal '5678', ESP.secret_access_key
+        assert_equal '5678', ESP::Resource.hmac_secret_key
+      end
+    end
+
+    context '.env' do
+      setup do
+        ESP.instance_variable_set(:@env, nil)
+      end
+
+      teardown do
+        ESP.instance_variable_set(:@env, nil)
+        ENV['ESP_ENV'] = 'test'
+        ENV['RAILS_ENV'] = 'test'
+      end
+
+      should 'return production when ENV is not set' do
+        ENV['ESP_ENV'] = nil
+        ENV['RAILS_ENV'] = nil
+        assert_predicate ESP.env, :production?
+      end
+
+      should 'return test when ENV[ESP_ENV] is set to test' do
+        ENV['ESP_ENV'] = 'test'
+        assert_predicate ESP.env, :test?
+      end
+    end
+  end
+end

data/test/factories/alerts.rb

@@ -0,0 +1,234 @@
+FactoryGirl.define do
+  factory :alert, class: 'ESP::Alert' do
+    skip_create
+
+    sequence(:id) { |n| n }
+    type "alerts"
+    created_at { Time.current }
+    status "fail"
+    resource "resource-3"
+    updated_at nil
+    metadata { { abc: 123 } }
+    started_at { Time.current }
+    ended_at nil
+    relationships do
+      {
+        external_account: {
+          data: {
+            type: "external_accounts",
+            id: "1015"
+          },
+          links: {
+            related: "http://test.host/api/v2/external_accounts/1015.json"
+          }
+        },
+        region: {
+          data: {
+            type: "regions",
+            id: "1014"
+          }
+        },
+        signature: {
+          data: {
+            type: "signatures",
+            id: "1013"
+          },
+          links: {
+            related: "http://test.host/api/v2/signatures/1013.json"
+          }
+        },
+        custom_signature: {
+          data: nil
+        },
+        suppression: {
+          data: {
+            id: "1",
+            type: "suppressions"
+          },
+          links: {
+            related: "http://test.host/api/v2/suppressions/1.json"
+          }
+        },
+        cloud_trail_events: {
+          data: [
+            {
+              type: "cloud_trail_events",
+              id: "1"
+            }
+          ],
+          links: {
+            related: "http://test.host/api/v2/alerts/1017/cloud_trail_events.json"
+          }
+        },
+        tags: {
+          data: [
+            {
+              id: "1",
+              type: "tags"
+            },
+            {
+              id: "2",
+              type: "tags"
+            }
+          ]
+        }
+      }
+    end
+    included do
+      [
+        {
+          id: "1015",
+          type: "external_accounts",
+          attributes: {
+            account: "5",
+            arn: "arn:aws:iam::5:role/test_sts_role",
+            created_at: "2015-09-11T21:12:15.183Z",
+            external_id: "test_sts_external_id_1",
+            name: nil,
+            updated_at: nil,
+            user_attribution_role: nil
+          },
+          relationships: {
+            organization: {
+              data: {
+                type: "organizations",
+                id: "5"
+              },
+              links: {
+                related: "http://test.host/api/v2/organizations/5.json"
+              }
+            },
+            sub_organization: {
+              data: {
+                type: "sub_organizations",
+                id: "5"
+              },
+              links: {
+                related: "http://test.host/api/v2/sub_organizations/5.json"
+              }
+            },
+            team: {
+              data: {
+                type: "teams",
+                id: "5"
+              },
+              links: {
+                related: "http://test.host/api/v2/teams/5.json"
+              }
+            },
+            user_attribution_role: {
+              data: nil
+            }
+          }
+        },
+        {
+          id: "1014",
+          type: "regions",
+          attributes: {
+            code: "us_east_test_3"
+          }
+        },
+        {
+          id: "1013",
+          type: "signatures",
+          attributes: {
+            created_at: "2015-09-11T21:12:15.192Z",
+            description: "\"Some description for some test\"",
+            identifier: "3 Unique ID",
+            name: "3_test_signature",
+            resolution: "\"Turn on some setting\"",
+            risk_level: "High",
+            updated_at: nil
+          },
+          relationships: {
+            service: {
+              data: {
+                type: "services",
+                id: "3"
+              },
+              links: {
+                related: "http://test.host/api/v2/services/3.json"
+              }
+            }
+          }
+        },
+        {
+          id: "1",
+          type: "cloud_trail_events",
+          attributes: {
+            event_id: "1",
+            event_name: "1",
+            event_time: "2015-09-11T21:12:14.661Z",
+            username: "johndoe",
+            ip_address: "123.0.0.123",
+            user_agent: "Chrome"
+          }
+        },
+        {
+          id: "1",
+          type: "suppressions",
+          attributes: {
+            created_at: "2015-10-16T18:34:19.464Z",
+            reason: "I dont like this",
+            status: "setup",
+            updated_at: "2015-10-16T18:34:19.464Z",
+            configuration: {
+              suppression_type: "regions",
+              resource: nil,
+              regions: [
+                {
+                  id: "4",
+                  type: "regions",
+                  attributes: {
+                    code: "us_east_test_4"
+                  }
+                }
+              ],
+              external_accounts: []
+            }
+          },
+          relationships: {
+            organization: {
+              data: {
+                id: "4",
+                type: "organizations"
+              },
+              links: {
+                related: "http://test.host/api/v2/organizations/4.json"
+              }
+            },
+            created_by: {
+              data: {
+                id: "1",
+                type: "users"
+              },
+              links: {
+                related: "http://test.host/api/v2/users/1.json"
+              }
+            }
+          }
+        },
+        {
+          id: "1",
+          type: "tags",
+          attributes: {
+            key: "Name",
+            value: "abc123",
+            created_at: "2015-10-16T18:34:19.569Z",
+            updated_at: "2015-10-16T18:34:19.569Z"
+          }
+        },
+        {
+          id: "2",
+          type: "tags",
+          attributes: {
+            key: "Name",
+            value: "abc123",
+            created_at: "2015-10-16T18:34:19.571Z",
+            updated_at: "2015-10-16T18:34:19.571Z"
+          }
+        }
+      ]
+    end
+  end
+end

data/test/factories/cloud_trail_events.rb

@@ -0,0 +1,16 @@
+FactoryGirl.define do
+  factory :contact_request, class: 'ESP::ContactRequest' do
+    skip_create
+
+    sequence(:id) { |n| n }
+    type "cloud_trail_events"
+    title "test2"
+    event_id "1"
+    event_name "1"
+    event_time "2015-10-16T19:07:24.434Z"
+    raw_event { { test: "event data" } }
+    username "johndoe"
+    ip_address "123.0.0.123"
+    user_agent "Chrome"
+  end
+end

data/test/factories/contact_requests.rb

@@ -0,0 +1,14 @@
+FactoryGirl.define do
+  factory :cloud_trail_event, class: 'ESP::CloudTrailEvent' do
+    skip_create
+
+    sequence(:id) { |n| n }
+    type "cloud_trail_events"
+    event_id "1"
+    event_name "1"
+    event_time { Time.current }
+    username "johndoe"
+    ip_address "123.0.0.123"
+    user_agent "Chrome"
+  end
+end

data/test/factories/custom_signatures.rb

@@ -0,0 +1,30 @@
+FactoryGirl.define do
+  factory :custom_signature, class: 'ESP::CustomSignature' do
+    skip_create
+
+    sequence(:id) { |n| n }
+    type "custom_signatures"
+    created_at { Time.current }
+    active true
+    description "Test description"
+    identifier "AWS::Test::001"
+    name "Test"
+    resolution "Test resolution"
+    risk_level "Medium"
+    signature "Some javascript"
+    language "javascript"
+    updated_at nil
+    relationships do
+      { organization: {
+        data: {
+          type: "organizations",
+          id: "1003"
+        },
+        links: {
+          related: "http://test.host/api/v2/organizations/1003.json"
+        }
+      }
+      }
+    end
+  end
+end

data/test/factories/dashboards.rb

@@ -0,0 +1,91 @@
+FactoryGirl.define do
+  factory :dashboard, class: 'ESP::Dashboard' do
+    skip_create
+
+    type "reports"
+    team_name "Operations 1"
+    sub_organization_name "IT Department 1"
+    organization_name "Test Organization 1"
+    created_at { Time.current }
+    updated_at { Time.current }
+    relationships do
+      { stat: {
+        data: {
+          type: "stats",
+          id: "1"
+        },
+        links: {
+          related: "http://test.host/api/v2/reports/1/stats.json"
+        }
+      }
+      }
+    end
+    included do
+      [
+        {
+          id: "1",
+          type: "stats",
+          attributes: {
+            total: 59,
+            stat_signatures: [
+              {
+                signature: {
+                  id: 1,
+                  name: "1_test_signature",
+                  risk_level: "High",
+                  service: {
+                    code: "S1",
+                    id: 1,
+                    name: "SSS"
+                  }
+                },
+                total_pass: 2,
+                total_fail: 6,
+                total_warn: 8,
+                total_error: 1,
+                total_new_1h: 7,
+                total_new_1d: 14
+              }
+            ],
+            stat_custom_signatures: [
+              {
+                custom_signature: {
+                  id: 1,
+                  name: "Test",
+                  risk_level: "Medium"
+                },
+                total_pass: 8,
+                total_fail: 2,
+                total_warn: 4,
+                total_error: 6,
+                total_new_1h: 8,
+                total_new_1d: 12
+              }
+            ],
+            stat_regions: [
+              {
+                region: {
+                  id: 1,
+                  code: "us_east_test_1"
+                },
+                total_pass: 16,
+                total_fail: 18,
+                total_warn: 12,
+                total_error: 11,
+                total_high: 16,
+                total_medium: 18,
+                total_low: 20,
+                total_new_1h_high: 4,
+                total_new_1h_medium: 5,
+                total_new_1h_low: 9,
+                total_new_1d_high: 8,
+                total_new_1d_medium: 8,
+                total_new_1d_low: 13
+              }
+            ]
+          }
+        }
+      ]
+    end
+  end
+end

data/test/factories/errors.rb

@@ -0,0 +1,24 @@
+FactoryGirl.define do
+  factory :error, class: 'ActiveResource::Base' do
+    skip_create
+
+    errors do
+      [{ status: '401',
+         title: 'Access Denied' }]
+    end
+
+    trait :active_record do
+      errors do
+        [{ status: '401',
+           title: "Name can't be blank",
+           meta: { name: "can't be blank" } },
+         { status: '401',
+           title: "Name is invalid",
+           meta: { name: "is invalid" } },
+         { status: '401',
+           title: "Description can't be blank",
+           meta: { description: "can't be blank" } }]
+      end
+    end
+  end
+end

data/test/factories/external_accounts.rb

@@ -0,0 +1,44 @@
+FactoryGirl.define do
+  factory :external_account, class: 'ESP::ExternalAccount' do
+    skip_create
+
+    sequence(:id) { |n| n }
+    type "external_accounts"
+    account "762160981991"
+    arn "arn:aws:iam::762160981991:role/Evident-Service-Role-Kevin"
+    created_at { Time.current }
+    external_id "913310e7-6a9c-49f7-bd69-120721ec1122"
+    name "Dev"
+    updated_at { Time.current }
+    relationships do
+      { organization: {
+        data: {
+          type: "organizations",
+          id: "1"
+        },
+        links: {
+          related: "http://localhost:3000/api/v2/organizations/1.json"
+        }
+      },
+        sub_organization: {
+          data: {
+            type: "sub_organizations",
+            id: "1"
+          },
+          links: {
+            related: "http://localhost:3000/api/v2/sub_organizations/1.json"
+          }
+        },
+        team: {
+          data: {
+            type: "teams",
+            id: "1"
+          },
+          links: {
+            related: "http://localhost:3000/api/v2/teams/1.json"
+          }
+        }
+      }
+    end
+  end
+end