osso 0.0.3.5 → 0.0.3.6

data/spec/graphql/mutations/create_enterprise_account_spec.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::GraphQL::Schema do
+  describe 'CreateIdentityProvider' do
+    let(:domain) { Faker::Internet.domain_name }
+    let(:variables) do
+      {
+        input: {
+          name: Faker::Company.name,
+          domain: domain,
+        },
+      }
+    end
+
+    let(:mutation) do
+      <<~GRAPHQL
+         mutation CreateEnterpriseAccount($input: CreateEnterpriseAccountInput!) {
+          createEnterpriseAccount(input: $input) {
+            enterpriseAccount {
+              id
+              domain
+              name
+              status
+            }
+          }
+        }
+      GRAPHQL
+    end
+
+    subject do
+      described_class.execute(
+        mutation,
+        variables: variables,
+        context: { scope: current_scope },
+      )
+    end
+
+    describe 'for an admin user' do
+      let(:current_scope) { :admin }
+      it 'creates an Enterprise Account' do
+        expect { subject }.to change { Osso::Models::EnterpriseAccount.count }.by(1)
+        expect(subject.dig('data', 'createEnterpriseAccount', 'enterpriseAccount', 'domain')).
+          to eq(domain)
+      end
+    end
+
+    describe 'for an email scoped user' do
+      let(:current_scope) { domain }
+
+      it 'creates an Enterprise Account' do
+        expect { subject }.to change { Osso::Models::EnterpriseAccount.count }.by(1)
+        expect(subject.dig('data', 'createEnterpriseAccount', 'enterpriseAccount', 'domain')).
+          to eq(domain)
+      end
+    end
+    describe 'for the wrong email scoped user' do
+      let(:current_scope) { 'foo.com' }
+
+      it 'does not create an Enterprise Account' do
+        expect { subject }.to_not(change { Osso::Models::EnterpriseAccount.count })
+        expect(subject.dig('data', 'createEnterpriseAccount', 'enterpriseAccount', 'domain')).
+          to be_nil
+      end
+    end
+  end
+end

data/spec/graphql/mutations/create_identity_provider_spec.rb

@@ -0,0 +1,104 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::GraphQL::Schema do
+  describe 'CreateIdentityProvider' do
+    let(:enterprise_account) { create(:enterprise_account) }
+    let(:mutation) do
+      <<~GRAPHQL
+         mutation CreateIdentityProvider($input: CreateIdentityProviderInput!) {
+          createIdentityProvider(input: $input) {
+            identityProvider {
+              id
+              domain
+              enterpriseAccountId
+              service
+              acsUrl
+            }
+          }
+        }
+      GRAPHQL
+    end
+
+    subject do
+      described_class.execute(
+        mutation,
+        variables: variables,
+        context: { scope: current_scope },
+      )
+    end
+
+    describe 'for an admin user' do
+      let(:current_scope) { :admin }
+      describe 'without a service' do
+        let(:variables) { { input: { enterpriseAccountId: enterprise_account.id } } }
+
+        it 'creates an identity provider' do
+          expect { subject }.to change { enterprise_account.identity_providers.count }.by(1)
+          expect(subject.dig('data', 'createIdentityProvider', 'identityProvider', 'domain')).
+            to eq(enterprise_account.domain)
+        end
+      end
+
+      describe 'with a service' do
+        let(:variables) { { input: { enterpriseAccountId: enterprise_account.id, service: 'OKTA' } } }
+
+        it 'creates an identity provider for given service ' do
+          expect { subject }.to change { enterprise_account.identity_providers.count }.by(1)
+          expect(subject.dig('data', 'createIdentityProvider', 'identityProvider', 'service')).
+            to eq('OKTA')
+        end
+      end
+    end
+
+    describe 'for an email scoped user' do
+      let(:domain) { Faker::Internet.domain_name }
+      let(:current_scope) { domain }
+      let(:enterprise_account) { create(:enterprise_account, domain: domain) }
+
+      describe 'without a service' do
+        let(:variables) { { input: { enterpriseAccountId: enterprise_account.id } } }
+
+        it 'creates an identity provider' do
+          expect { subject }.to change { enterprise_account.identity_providers.count }.by(1)
+          expect(subject.dig('data', 'createIdentityProvider', 'identityProvider', 'domain')).
+            to eq(domain)
+        end
+      end
+
+      describe 'with a service' do
+        let(:variables) { { input: { enterpriseAccountId: enterprise_account.id, service: 'OKTA' } } }
+
+        it 'creates an identity provider for given service ' do
+          expect { subject }.to change { enterprise_account.identity_providers.count }.by(1)
+          expect(subject.dig('data', 'createIdentityProvider', 'identityProvider', 'service')).
+            to eq('OKTA')
+        end
+      end
+    end
+
+    describe 'for a wrong email scoped user' do
+      let(:domain) { Faker::Internet.domain_name }
+      let(:current_scope) { domain }
+      let(:enterprise_account) { create(:enterprise_account, domain: domain) }
+      let(:target_account) { create(:enterprise_account) }
+
+      describe 'without a service' do
+        let(:variables) { { input: { enterpriseAccountId: target_account.id } } }
+
+        it 'does not creates a identity provider' do
+          expect { subject }.to_not(change { Osso::Models::IdentityProvider.count })
+        end
+      end
+
+      describe 'with a service' do
+        let(:variables) { { input: { enterpriseAccountId: target_account.id, service: 'OKTA' } } }
+
+        it 'does not creates a identity provider' do
+          expect { subject }.to_not(change { Osso::Models::IdentityProvider.count })
+        end
+      end
+    end
+  end
+end

data/spec/graphql/query/enterprise_account_spec.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::GraphQL::Schema do
+  describe 'EnterpriseAccount' do
+    let(:domain) { Faker::Internet.domain_name }
+    let(:variables) { { domain: domain } }
+    let(:query) do
+      <<~GRAPHQL
+        query EnterpriseAccount($domain: String!) {
+          enterpriseAccount(domain: $domain) {
+            domain
+              id
+              identityProviders {
+                id
+                service
+                domain
+                acsUrl
+                ssoCert
+                ssoUrl
+                configured
+              }
+              name
+              status
+            }
+        }
+      GRAPHQL
+    end
+
+    before do
+      create(:enterprise_account)
+      create(:enterprise_account, domain: domain)
+    end
+
+    subject do
+      described_class.execute(
+        query,
+        variables: variables,
+        context: { scope: current_scope },
+      )
+    end
+
+    describe 'for an admin user' do
+      let(:current_scope) { :admin }
+      it 'returns Enterprise Account for domain' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'enterpriseAccount', 'domain')).to eq(domain)
+      end
+    end
+
+    describe 'for an email scoped user' do
+      let(:current_scope) { domain }
+      it 'returns Enterprise Account for domain' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'enterpriseAccount', 'domain')).to eq(domain)
+      end
+    end
+
+    describe 'for the wrong email scoped user' do
+      let(:current_scope) { 'bar.com' }
+      it 'returns Enterprise Account for domain' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'enterpriseAccount')).to be_nil
+      end
+    end
+  end
+end

data/spec/graphql/query/enterprise_accounts_spec.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::GraphQL::Schema do
+  describe 'EnterpriseAccounts' do
+    describe 'for an admin user' do
+      let(:current_scope) { :admin }
+
+      it 'returns Enterprise Accounts' do
+        create_list(:enterprise_account, 2)
+
+        query = <<~GRAPHQL
+          query EnterpriseAccounts {
+            enterpriseAccounts {
+              domain
+              id
+              identityProviders {
+                id
+                service
+                domain
+                acsUrl
+                ssoCert
+                ssoUrl
+                configured
+              }
+              name
+              status
+            }
+          }
+        GRAPHQL
+
+        response = described_class.execute(
+          query,
+          variables: nil,
+          context: { scope: current_scope },
+        )
+
+        expect(response['errors']).to be_nil
+        expect(response.dig('data', 'enterpriseAccounts').count).to eq(2)
+      end
+    end
+  end
+end

data/spec/graphql/query/identity_provider_spec.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::GraphQL::Schema do
+  describe 'Identity Provider' do
+    let(:id) { Faker::Internet.uuid }
+    let(:variables) { { id: id } }
+    let(:query) do
+      <<~GRAPHQL
+        query IdentityProvider($id: ID!) {
+          identityProvider(id: $id) {            
+            id
+            service
+            domain
+            acsUrl
+            ssoCert
+            ssoUrl
+            configured
+          }
+        }
+      GRAPHQL
+    end
+
+    before do
+      create(:identity_provider)
+      create(:identity_provider, id: id)
+    end
+
+    subject do
+      described_class.execute(
+        query,
+        variables: variables,
+        context: { scope: current_scope },
+      )
+    end
+
+    describe 'for an admin user' do
+      let(:current_scope) { :admin }
+      it 'returns Identity Provider for id' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'identityProvider', 'id')).to eq(id)
+      end
+    end
+
+    xdescribe 'for an email scoped user' do
+      let(:current_scope) { domain }
+      it 'returns Enterprise Account for domain' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'enterpriseAccount', 'domain')).to eq(domain)
+      end
+    end
+
+    xdescribe 'for the wrong email scoped user' do
+      let(:current_scope) { 'bar.com' }
+      it 'returns Enterprise Account for domain' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'enterpriseAccount')).to be_nil
+      end
+    end
+  end
+end

data/spec/graphql/query/oauth_clients_account_spec.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::GraphQL::Schema do
+  describe 'OAuthClients' do
+    let(:query) do
+      <<~GRAPHQL
+        query OAuthClients {
+          oauthClients {
+            name
+            id
+          }
+        }
+      GRAPHQL
+    end
+
+    before do
+      create_list(:oauth_client, 2)
+    end
+
+    subject do
+      described_class.execute(
+        query,
+        variables: nil,
+        context: { scope: current_scope },
+      )
+    end
+
+    describe 'for an admin user' do
+      let(:current_scope) { :admin }
+
+      it 'returns Oauth Clients' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'oauthClients').count).to eq(2)
+      end
+    end
+
+    describe 'for an email scoped user' do
+      let(:current_scope) { 'foo.com' }
+
+      it 'returns Oauth Clients' do
+        expect(subject['errors']).to be_nil
+        expect(subject.dig('data', 'oauthClients')).to be_nil
+      end
+    end
+  end
+end

data/spec/models/azure_saml_provider_spec.rb

@@ -2,18 +2,18 @@
 
 require 'spec_helper'
 
-describe Osso::Models::AzureSamlProvider do
-  subject { create(:azure_saml_provider) }
+# describe Osso::Models::AzureSamlProvider do
+#   subject { create(:azure_identity_provider) }
 
-  describe '#saml_options' do
-    it 'returns the required args' do
-      expect(subject.saml_options).
-        to match(
-          domain: subject.domain,
-          idp_cert: subject.idp_cert,
-          idp_sso_target_url: subject.idp_sso_target_url,
-          issuer: "id:#{subject.id}",
-        )
-    end
-  end
-end
+#   describe '#saml_options' do
+#     it 'returns the required args' do
+#       expect(subject.saml_options).
+#         to match(
+#           domain: subject.domain,
+#           idp_cert: subject.idp_cert,
+#           idp_sso_target_url: subject.idp_sso_target_url,
+#           issuer: "id:#{subject.id}",
+#         )
+#     end
+#   end
+# end

data/spec/models/identity_provider_spec.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe Osso::Models::IdentityProvider do
+  subject { create(:okta_identity_provider) }
+
+  describe '#assertion_consumer_service_url' do
+    it 'returns the expected URI' do
+      ENV['BASE_URL'] = 'https://example.com'
+
+      expect(subject.assertion_consumer_service_url).to eq(
+        "https://example.com/auth/saml/#{subject.id}/callback",
+      )
+    end
+  end
+end