tcell_agent 0.4.0 → 1.0.0

data/spec/lib/tcell_agent/policies/content_security_policy_spec.rb

@@ -2,14 +2,13 @@ require 'spec_helper'
 
 module TCellAgent
   module Policies
-
     describe ContentSecurityPolicy do
-      context "test empty agent" do
-        it "enabled is false" do
+      context 'test empty agent' do
+        it 'enabled is false' do
           policy_json_empty = {
-            "policy_id"=>"01a1",
-            "data"=>{
-              "options"=>{
+            'policy_id' => '01a1',
+            'data' => {
+              'options' => {
 
               }
             }
@@ -17,58 +16,58 @@ module TCellAgent
 
           empty_policy = ContentSecurityPolicy.from_json(policy_json_empty)
 
-          expect(empty_policy.policy_id).to eq("01a1")
+          expect(empty_policy.policy_id).to eq('01a1')
           expect(empty_policy.js_agent_api_key).to eq(nil)
         end
       end
 
-      context "tests xss is true and enabled true" do
-        it "returns true" do
+      context 'tests xss is true and enabled true' do
+        it 'returns true' do
           policy_json_one = {
-            "policy_id"=>"01a1",
-            "data"=>{
-              "options"=>{
-                "js_agent_api_key"=>"000-000-1"
+            'policy_id' => '01a1',
+            'data' => {
+              'options' => {
+                'js_agent_api_key' => '000-000-1'
               }
             }
           }
 
           from_json = ContentSecurityPolicy.from_json(policy_json_one)
 
-          expect(from_json.policy_id).to eq("01a1")
-          expect(from_json.js_agent_api_key).to eq("000-000-1")
+          expect(from_json.policy_id).to eq('01a1')
+          expect(from_json.js_agent_api_key).to eq('000-000-1')
         end
       end
 
-      context "initialized with 3 items" do
-        it "returns true" do
+      context 'initialized with 3 items' do
+        it 'returns true' do
           content_security_policy_json = {
-            "policy_id"=>"00a1",
-            "headers"=>[
-              {"name"=>"csp", "value"=>"csp header value"}
+            'policy_id' => '00a1',
+            'headers' => [
+              { 'name' => 'csp', 'value' => 'csp header value' }
             ]
           }
 
           csp_from_json = ContentSecurityPolicy.from_json(content_security_policy_json)
 
-          expect(csp_from_json.policy_id).to eq("00a1")
-          expect(csp_from_json.headers[0].type).to eq("csp")
-          expect(csp_from_json.headers[0].value).to eq("csp header value")
+          expect(csp_from_json.policy_id).to eq('00a1')
+          expect(csp_from_json.headers[0].type).to eq('csp')
+          expect(csp_from_json.headers[0].value).to eq('csp header value')
         end
       end
 
-      context "headers match up appropriately" do
-        it "returns content-security-policy headers" do
-          expect(ContentSecurityPolicy.cspHeadersForType("csp")).to match_array(["Content-Security-Policy"])
+      context 'headers match up appropriately' do
+        it 'returns content-security-policy headers' do
+          expect(ContentSecurityPolicy.cspHeadersForType('csp')).to match_array(['Content-Security-Policy'])
         end
       end
 
-      context "csp header example, invalid header" do
-        it "returns false" do
+      context 'csp header example, invalid header' do
+        it 'returns false' do
           content_security_policy_json = {
-            "policy_id"=>"01a1",
-            "headers"=>[
-              {"name"=>"csp-header-is-bad", "value"=>"csp header value"}
+            'policy_id' => '01a1',
+            'headers' => [
+              { 'name' => 'csp-header-is-bad', 'value' => 'csp header value' }
             ]
           }
 
@@ -78,12 +77,12 @@ module TCellAgent
         end
       end
 
-      context "secure header, value is bad" do
-        it "returns false" do
+      context 'secure header, value is bad' do
+        it 'returns false' do
           content_security_policy_json = {
-            "policy_id"=>"01a1",
-            "headers"=>[
-              {"name"=>"csp", "value"=>"value123\\nabc"}
+            'policy_id' => '01a1',
+            'headers' => [
+              { 'name' => 'csp', 'value' => 'value123\\nabc' }
             ]
           }
           csp_policy = ContentSecurityPolicy.from_json(content_security_policy_json)
@@ -91,85 +90,39 @@ module TCellAgent
         end
       end
 
-      context "secure header, report-uri seperate" do
-        it "returns false" do
+      context 'secure header, report-uri seperate' do
+        it 'returns false' do
           content_security_policy_json = {
-            "policy_id"=>"01a1",
-            "headers"=>[
-              {"name"=>"csp", "value"=>"value normal", "report-uri"=>"https://example.com/abcdde"}
+            'policy_id' => '01a1',
+            'headers' => [
+              { 'name' => 'csp', 'value' => 'value normal', 'report-uri' => 'https://example.com/abcdde' }
             ]
           }
 
           csp_policy = ContentSecurityPolicy.from_json(content_security_policy_json)
 
           expect(csp_policy.headers.length).to eq(1)
-          expect(csp_policy.headers[0].value).to eq("value normal; report-uri https://example.com/abcdde?c=-815891691")
-          expect(csp_policy.headers[0].value("1","2","3")).to eq("value normal; report-uri https://example.com/abcdde?tid=1&sid=3&rid=2&c=1777384531")
+          expect(csp_policy.headers[0].value).to eq('value normal; report-uri https://example.com/abcdde?c=-815891691')
+          expect(csp_policy.headers[0].value('1', '2', '3')).to eq('value normal; report-uri https://example.com/abcdde?tid=1&sid=3&rid=2&c=1777384531')
         end
       end
 
-      context "modifying js_agent_url" do
-
-        context "csp header value does not include new js agent url" do
-          it "should have the configuration set to the default js_agent_url value" do
-            expect(TCellAgent.configuration.js_agent_url).to eq("https://api.tcell.io/tcellagent.min.js")
-
-            content_security_policy_json = {
-              "policy_id"=>"01a1",
-              "headers"=>[
-                {"name"=>"csp", "value"=>"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/"}
-              ]
-            }
-
-            csp_policy = ContentSecurityPolicy.from_json(content_security_policy_json)
-
-            expect(csp_policy.headers.length).to eq(1)
-            expect(csp_policy.headers[0].value).to eq("script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/")
-            expect(TCellAgent.configuration.js_agent_url).to eq("https://api.tcell.io/tcellagent.min.js")
-          end
-        end
-
-        context "csp header value includes new js agent url" do
-          it "should have the configuration set to the default js_agent_url value" do
-            expect(TCellAgent.configuration.js_agent_url).to eq("https://api.tcell.io/tcellagent.min.js")
-
-            content_security_policy_json = {
-              "policy_id"=>"01a1",
-              "headers"=>[
-                {"name"=>"csp", "value"=>"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/ https://jsagent.tcell.io/"}
-              ]
-            }
-
-            csp_policy = ContentSecurityPolicy.from_json(content_security_policy_json)
-
-            expect(csp_policy.headers.length).to eq(1)
-            expect(csp_policy.headers[0].value).to eq("script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/ https://jsagent.tcell.io/")
-            expect(TCellAgent.configuration.js_agent_url).to eq("https://jsagent.tcell.io/tcellagent.min.js")
-          end
-
-          context "but js_agent_url was not default" do
-            it "should not modify js_agent_url" do
-              TCellAgent.configuration.startup_js_agent_url = "https://www.customer-website.com/tcellagent.min.js"
-              TCellAgent.configuration.js_agent_url = "https://www.customer-website.com/tcellagent.min.js"
-              expect(TCellAgent.configuration.js_agent_url).to eq("https://www.customer-website.com/tcellagent.min.js")
-
-              content_security_policy_json = {
-                "policy_id"=>"01a1",
-                "headers"=>[
-                  {"name"=>"csp", "value"=>"script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/ https://jsagent.tcell.io/"}
-                ]
-              }
+      context 'default js_agent_url' do
+        it 'should have the configuration set to the default js_agent_url value' do
+          expect(TCellAgent.configuration.js_agent_url).to eq('https://jsagent.tcell.io/tcellagent.min.js')
 
-              csp_policy = ContentSecurityPolicy.from_json(content_security_policy_json)
+          content_security_policy_json = {
+            'policy_id' => '01a1',
+            'headers' => [
+              { 'name' => 'csp', 'value' => "script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/" }
+            ]
+          }
 
-              expect(csp_policy.headers.length).to eq(1)
-              expect(csp_policy.headers[0].value).to eq("script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/ https://jsagent.tcell.io/")
-              expect(TCellAgent.configuration.js_agent_url).to eq("https://www.customer-website.com/tcellagent.min.js")
+          csp_policy = ContentSecurityPolicy.from_json(content_security_policy_json)
 
-              TCellAgent.configuration.startup_js_agent_url = "https://api.tcell.io/tcellagent.min.js"
-              TCellAgent.configuration.js_agent_url = "https://api.tcell.io/tcellagent.min.js"
-            end
-          end
+          expect(csp_policy.headers.length).to eq(1)
+          expect(csp_policy.headers[0].value).to eq("script-src 'unsafe-inline' 'unsafe-eval' 'self' https://api.tcell.io/")
+          expect(TCellAgent.configuration.js_agent_url).to eq('https://jsagent.tcell.io/tcellagent.min.js')
         end
       end
     end

data/spec/lib/tcell_agent/policies/dataloss_policy_spec.rb

@@ -4,242 +4,219 @@ require 'set'
 module TCellAgent
   module Policies
     describe DataLossPolicy do
-      policy_json = {
-        "policy_id"=>"x1a1",
-        "data"=>{
-          "protections"=>[
-            {"table"=>"user",
-             "field"=>"ssn",
-             "actions"=>{
-               "body"=>["event","redact"],
-               "logs"=>["redact"]
-             }
-          }
-          ]
-        }
-      }
-      policy = DataLossPolicy.from_json(policy_json)
-      # context "initialized with 3 items" do
-      #   it "returns true" do
-      #     expect(policy.get_actions_for("user","ssn")).to eq(["body_redact"].to_set)
-      #   end
-      # end
       policy_json_two = {
-        "policy_id"=>"x1a1",
-        "data"=>{
-          "session_id_protections"=>{"body"=>["redact"], "log"=>["event"]}
+        'policy_id' => 'x1a1',
+        'data' => {
+          'session_id_protections' => { 'body' => ['redact'], 'log' => ['event'] }
         }
       }
       policy_two = DataLossPolicy.from_json(policy_json_two)
-      context "check session_id_protections" do
-        it "gives the right actions" do
+      context 'check session_id_protections' do
+        it 'gives the right actions' do
           expect(policy_two.get_actions_for_session_id.body_redact).to eq(true)
           expect(policy_two.get_actions_for_session_id.log_redact).to eq(nil)
           expect(policy_two.get_actions_for_session_id.log_event).to eq(true)
         end
       end
-      context "Database Options" do
-        it "Ignores bad table" do
+      context 'Database Options' do
+        it 'Ignores bad table' do
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "db_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'db_protections' => [
                 {
-                  "databases"=>["dave"],
-                  "schemas"=>["sam"],
-                  "tables"=>["trevor"],
-                  "fields"=>["fred"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'databases' => ['dave'],
+                  'schemas' => ['sam'],
+                  'tables' => ['trevor'],
+                  'fields' => ['fred'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           db_one_policy = DataLossPolicy.from_json(policy_json_requests)
-          expect(db_one_policy.get_actions_for_table("dave","sam","tommy","fred")).to eq(nil)
+          expect(db_one_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred')).to eq(nil)
         end
-        it "Partial Policy" do
+        it 'Partial Policy' do
           # Assume if databases, schemas that are missing are "*"
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "db_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'db_protections' => [
                 {
-                  "fields"=>["fred"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'fields' => ['fred'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           db_one_policy = DataLossPolicy.from_json(policy_json_requests)
-          expect((db_one_policy.get_actions_for_table("dave","sam","tommy","fred").to_a)[0].log_redact).to eq(true)
-          expect((db_one_policy.get_actions_for_table("dave","sam","tommy","fred","abcd").to_a)[0].log_redact).to eq(true)
+          expect(db_one_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred').to_a[0].log_redact).to eq(true)
+          expect(db_one_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred', 'abcd').to_a[0].log_redact).to eq(true)
         end
-        it "Scopes by reoute_id" do
+        it 'Scopes by reoute_id' do
           policy_json_request_ids = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "db_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'db_protections' => [
                 {
-                  "scope"=>"route",
-                  "route_ids"=>["abcd"],
-                  "databases"=>["dave"],
-                  "schemas"=>["sam"],
-                  "tables"=>["tommy"],
-                  "fields"=>["fred"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'scope' => 'route',
+                  'route_ids' => ['abcd'],
+                  'databases' => ['dave'],
+                  'schemas' => ['sam'],
+                  'tables' => ['tommy'],
+                  'fields' => ['fred'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           db_two_policy = DataLossPolicy.from_json(policy_json_request_ids)
-          expect((db_two_policy.get_actions_for_table("dave","sam","tommy","fred").to_a).size).to eq(0)
-          expect((db_two_policy.get_actions_for_table("dave","sam","tommy","fred","other_route").to_a).size).to eq(0)
-          expect((db_two_policy.get_actions_for_table("dave","sam","tommy","fred","abcd").to_a).size).to eq(1)
-
-
-          expect((db_two_policy.get_actions_for_table("dave","sam","tommy","fred","abcd").to_a)[0].log_redact).to eq(true)
-          expect((db_two_policy.get_actions_for_table("dave","sam","tommy","fred","abcd").to_a)[0].body_redact).to eq(nil)
-          expect((db_two_policy.get_actions_for_table("dave","sam","tommy","fred","abcd").to_a)[0].body_event).to eq(true)
+          expect(db_two_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred').to_a.size).to eq(0)
+          expect(db_two_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred', 'other_route').to_a.size).to eq(0)
+          expect(db_two_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred', 'abcd').to_a.size).to eq(1)
 
+          expect(db_two_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred', 'abcd').to_a[0].log_redact).to eq(true)
+          expect(db_two_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred', 'abcd').to_a[0].body_redact).to eq(nil)
+          expect(db_two_policy.get_actions_for_table('dave', 'sam', 'tommy', 'fred', 'abcd').to_a[0].body_event).to eq(true)
         end
       end
-      context "Request Options" do
-        it "Ignores non-global scoped policy" do
+      context 'Request Options' do
+        it 'Ignores non-global scoped policy' do
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "request_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'request_protections' => [
                 {
-                  "variable_context"=>"form",
-                  "variables"=>["test123"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'variable_context' => 'form',
+                  'variables' => ['test123'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           policy_three = DataLossPolicy.from_json(policy_json_requests)
-          expect(policy_three.get_actions_for_request("form","test123").to_a[0].body_event).to eq(true)
-          expect(policy_three.get_actions_for_request("form","test123").to_a[0].log_event).to eq(nil)
+          expect(policy_three.get_actions_for_request('form', 'test123').to_a[0].body_event).to eq(true)
+          expect(policy_three.get_actions_for_request('form', 'test123').to_a[0].log_event).to eq(nil)
         end
-        it "Reads in the policy" do
+        it 'Reads in the policy' do
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "request_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'request_protections' => [
                 {
-                  "variable_context"=>"form",
-                  "scope"=>"route",
-                  "route_ids"=>["routex"],
-                  "variables"=>["test123"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'variable_context' => 'form',
+                  'scope' => 'route',
+                  'route_ids' => ['routex'],
+                  'variables' => ['test123'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           policy_three = DataLossPolicy.from_json(policy_json_requests)
-          entry_wildcard_route = policy_three.get_actions_for_request("form","TeSt123")
-          entry_given_route = policy_three.get_actions_for_request("form","TeSt123","routex")
+          entry_wildcard_route = policy_three.get_actions_for_request('form', 'TeSt123')
+          entry_given_route = policy_three.get_actions_for_request('form', 'TeSt123', 'routex')
           expect(entry_wildcard_route).to eq(nil)
           expect(entry_given_route.size).to eq(1)
           expect(entry_given_route.to_a[0].body_redact).to eq(nil)
           expect(entry_given_route.to_a[0].log_redact).to eq(true)
         end
 
-        it "Reads in the policy with cookie (redact/event)" do
+        it 'Reads in the policy with cookie (redact/event)' do
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "request_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'request_protections' => [
                 {
-                  "variable_context"=>"cookie",
-                  "scope"=>"route",
-                  "route_ids"=>["routex"],
-                  "variables"=>["test123"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'variable_context' => 'cookie',
+                  'scope' => 'route',
+                  'route_ids' => ['routex'],
+                  'variables' => ['test123'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           policy_three = DataLossPolicy.from_json(policy_json_requests)
-          entry_wildcard_route = policy_three.get_actions_for_request("cookie","test123")
-          entry_given_route = policy_three.get_actions_for_request("cookie","test123","routex")
+          entry_wildcard_route = policy_three.get_actions_for_request('cookie', 'test123')
+          entry_given_route = policy_three.get_actions_for_request('cookie', 'test123', 'routex')
           expect(entry_wildcard_route).to eq(nil)
           expect(entry_given_route.size).to eq(1)
           expect(entry_given_route.to_a[0].body_redact).to eq(nil)
           expect(entry_given_route.to_a[0].log_redact).to eq(true)
         end
 
-        it "Reads in the policy with mixed-case cookie (redact/event)" do
+        it 'Reads in the policy with mixed-case cookie (redact/event)' do
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "request_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'request_protections' => [
                 {
-                  "variable_context"=>"cookie",
-                  "scope"=>"route",
-                  "route_ids"=>["routex"],
-                  "variables"=>["teST123"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'variable_context' => 'cookie',
+                  'scope' => 'route',
+                  'route_ids' => ['routex'],
+                  'variables' => ['teST123'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           policy_three = DataLossPolicy.from_json(policy_json_requests)
-          entry_wildcard_route = policy_three.get_actions_for_request("cookie","test123")
-          entry_given_route = policy_three.get_actions_for_request("cookie","test123","routex")
+          entry_wildcard_route = policy_three.get_actions_for_request('cookie', 'test123')
+          entry_given_route = policy_three.get_actions_for_request('cookie', 'test123', 'routex')
           expect(entry_wildcard_route).to eq(nil)
           expect(entry_given_route).to eq(nil)
         end
 
-        it "Reads in the policy with header (redact/event)" do
+        it 'Reads in the policy with header (redact/event)' do
           policy_json_requests = {
-            "policy_id"=>"x1a1",
-            "data"=>{
-              "request_protections"=>[
+            'policy_id' => 'x1a1',
+            'data' => {
+              'request_protections' => [
                 {
-                  "variable_context"=>"header",
-                  "scope"=>"route",
-                  "route_ids"=>["routex"],
-                  "variables"=>["test123"],
-                  "actions"=>{
-                    "log"=>["redact"],
-                    "body"=>["event"]
+                  'variable_context' => 'header',
+                  'scope' => 'route',
+                  'route_ids' => ['routex'],
+                  'variables' => ['test123'],
+                  'actions' => {
+                    'log' => ['redact'],
+                    'body' => ['event']
                   }
                 }
               ]
             }
           }
           policy_three = DataLossPolicy.from_json(policy_json_requests)
-          entry_wildcard_route = policy_three.get_actions_for_request("header","TeSt123")
-          entry_given_route = policy_three.get_actions_for_request("header","TeSt123","routex")
+          entry_wildcard_route = policy_three.get_actions_for_request('header', 'TeSt123')
+          entry_given_route = policy_three.get_actions_for_request('header', 'TeSt123', 'routex')
           expect(entry_wildcard_route).to eq(nil)
           expect(entry_given_route.size).to eq(1)
           expect(entry_given_route.to_a[0].body_redact).to eq(nil)
           expect(entry_given_route.to_a[0].log_redact).to eq(true)
         end
       end
-
     end
   end
 end