@auth0/auth0-checkmate 1.4.0

package/tests/tenant_settings/checkSessionLifetime.test.js

@@ -0,0 +1,108 @@
+const { expect } = require("chai");
+const checkSessionLifetime = require("../../analyzer/lib/tenant_settings/checkSessionLifetime");
+const CONSTANTS = require("../../analyzer/lib/constants");
+
+describe("checkSessionLifetime", function() {
+
+  it("should report all fields with proper values", function() {
+    const options = {
+      tenant: {
+        idle_session_lifetime: 72,
+        session_lifetime: 168,
+        session_cookie: {
+          mode: "persistent",
+        },
+      },
+    };
+
+    checkSessionLifetime(options, (report) => {
+      expect(report).to.deep.include.members([
+        {
+          field: "idle_session_lifetime",
+          value: "72h",
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "session_lifetime",
+          value: "168h",
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "session_cookie_mode",
+          value: "persistent",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return fail if tenant is missing", function() {
+    checkSessionLifetime({}, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "tenant_setting_missing",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should report default values if idle_session_lifetime and session_lifetime are missing", function() {
+    const options = {
+      tenant: {
+        session_cookie: {
+          mode: "persistent",
+        },
+      },
+    };
+
+    checkSessionLifetime(options, (report) => {
+      expect(report).to.deep.include.members([
+        {
+          field: "idle_session_lifetime",
+          value: CONSTANTS.DEFAULT_IDLE_SESSION_LIFETIME,
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "session_lifetime",
+          value: CONSTANTS.DEFAULT_SESSION_LIFETIME,
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "session_cookie_mode",
+          value: "persistent",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should report default session_cookie_mode if session_cookie is missing", function() {
+    const options = {
+      tenant: {
+        idle_session_lifetime: 24,
+        session_lifetime: 48,
+      },
+    };
+
+    checkSessionLifetime(options, (report) => {
+      expect(report).to.deep.include.members([
+        {
+          field: "session_cookie_mode",
+          value: CONSTANTS.DEFAULT_SESSION_COOKIE_MODE,
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "idle_session_lifetime",
+          value: "24h",
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "session_lifetime",
+          value: "48h",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+});

package/tests/tenant_settings/checkSupportEmail.test.js

@@ -0,0 +1,77 @@
+const chai = require("chai");
+const expect = chai.expect;
+
+const checkSupportEmail = require("../../analyzer/lib/tenant_settings/checkSupportEmail");
+const CONSTANTS = require("../../analyzer/lib/constants");
+
+describe("checkSupportEmail", function () {
+  it("should return a fail report when tenant is missing or empty", function () {
+    const options = {
+      tenant: {}, // Empty tenant object
+    };
+
+    checkSupportEmail(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "tenant_setting_missing",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a success report when support_email is provided", function () {
+    const options = {
+      tenant: {
+        support_email: "support@contoso.com", // support_email is provided
+      },
+    };
+
+    checkSupportEmail(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "support_email",
+          attr: "support_email",
+          value: "support@contoso.com",
+          status: CONSTANTS.SUCCESS,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when support_email is not provided (empty string)", function () {
+    const options = {
+      tenant: {
+        support_email: "", // support_email is an empty string
+      },
+    };
+
+    checkSupportEmail(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "no_support_email",
+          attr: "support_email",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when support_email is not provided (null)", function () {
+    const options = {
+      tenant: {
+        support_email: null, // support_email is null
+      },
+    };
+
+    checkSupportEmail(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "no_support_email",
+          attr: "support_email",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+});

package/tests/tenant_settings/checkSupportUrl.test.js

@@ -0,0 +1,77 @@
+const chai = require("chai");
+const expect = chai.expect;
+
+const checkSupportUrl = require("../../analyzer/lib/tenant_settings/checkSupportUrl");
+const CONSTANTS = require("../../analyzer/lib/constants");
+
+describe("checkSupportUrl", function () {
+  it("should return a fail report when tenant is missing or empty", function () {
+    const options = {
+      tenant: {}, // Empty tenant object
+    };
+
+    checkSupportUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "tenant_setting_missing",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a success report when support_url is provided", function () {
+    const options = {
+      tenant: {
+        support_url: "https://support.contoso.com", // support_url is provided
+      },
+    };
+
+    checkSupportUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "support_url",
+          attr: "support_url",
+          value: "https://support.contoso.com",
+          status: CONSTANTS.SUCCESS,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when support_url is not provided (empty string)", function () {
+    const options = {
+      tenant: {
+        support_url: "", // support_url is an empty string
+      },
+    };
+
+    checkSupportUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "no_support_url",
+          attr: "support_url",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when support_url is not provided (null)", function () {
+    const options = {
+      tenant: {
+        support_url: null, // support_url is null
+      },
+    };
+
+    checkSupportUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "no_support_url",
+          attr: "support_url",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+});

package/tests/tenant_settings/checkTenantLoginUri.test.js

@@ -0,0 +1,82 @@
+const chai = require("chai");
+const expect = chai.expect;
+
+const checkTenantLoginUrl = require("../../analyzer/lib/tenant_settings/checkTenantLoginUrl");
+const CONSTANTS = require("../../analyzer/lib/constants");
+
+describe("checkTenantLoginUrl", function () {
+  it("should return a fail report when default_redirection_uri is empty", function () {
+    const options = {
+      tenant: {
+        default_redirection_uri: "", // Empty redirection URI
+      },
+    };
+
+    checkTenantLoginUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "no_default_redirection_uri",
+          attr: "default_redirection_uri",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when default_redirection_uri contains an insecure URL (localhost)", function () {
+    const options = {
+      tenant: {
+        default_redirection_uri: "http://localhost", // Insecure URL
+      },
+    };
+
+    checkTenantLoginUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "invalid_default_redirection_uri",
+          attr: "default_redirection_uri",
+          value: "http://localhost",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when default_redirection_uri contains an insecure URL (http://)", function () {
+    const options = {
+      tenant: {
+        default_redirection_uri: "http://example.com", // Insecure URL
+      },
+    };
+
+    checkTenantLoginUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "invalid_default_redirection_uri",
+          attr: "default_redirection_uri",
+          value: "http://example.com",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a success report when default_redirection_uri contains a secure URL", function () {
+    const options = {
+      tenant: {
+        default_redirection_uri: "https://contoso.com/login", // Secure URL
+      },
+    };
+
+    checkTenantLoginUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "default_redirection_uri",
+          attr: "default_redirection_uri",
+          value: "https://contoso.com/login",
+          status: CONSTANTS.SUCCESS,
+        },
+      ]);
+    });
+  });
+});

package/tests/tenant_settings/checkTenantLogoutUrl.test.js

@@ -0,0 +1,108 @@
+const chai = require("chai");
+const expect = chai.expect;
+
+const checkTenantLogoutUrl = require("../../analyzer/lib/tenant_settings/checkTenantLogoutUrl");
+const CONSTANTS = require("../../analyzer/lib/constants");
+
+describe("checkTenantLogoutUrl", function () {
+  it("should return a fail report when allowed_logout_urls is empty", function () {
+    const options = {
+      tenant: {
+        allowed_logout_urls: [], // Empty logout URLs
+      },
+    };
+
+    checkTenantLogoutUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "missing_allowed_logout_urls",
+          attr: "allowed_logout_urls",
+          value: "[]",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when allowed_logout_urls contains an insecure URL (localhost)", function () {
+    const options = {
+      tenant: {
+        allowed_logout_urls: ["http://localhost"], // Insecure URL
+      },
+    };
+
+    checkTenantLogoutUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "invalid_allowed_logout_urls",
+          attr: "allowed_logout_urls",
+          value: "http://localhost",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a fail report when allowed_logout_urls contains an insecure URL (http://)", function () {
+    const options = {
+      tenant: {
+        allowed_logout_urls: ["http://example.com"], // Insecure URL
+      },
+    };
+
+    checkTenantLogoutUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "invalid_allowed_logout_urls",
+          attr: "allowed_logout_urls",
+          value: "http://example.com",
+          status: CONSTANTS.FAIL,
+        },
+      ]);
+    });
+  });
+
+  it("should return a success report when allowed_logout_urls contains a secure URL", function () {
+    const options = {
+      tenant: {
+        allowed_logout_urls: ["https://contoso.com"], // Secure URL
+      },
+    };
+
+    checkTenantLogoutUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "allowed_logout_urls",
+          attr: "allowed_logout_urls",
+          value: "https://contoso.com",
+          status: CONSTANTS.SUCCESS,
+        },
+      ]);
+    });
+  });
+
+  it("should return both fail and success reports when allowed_logout_urls contains both secure and insecure URLs", function () {
+    const options = {
+      tenant: {
+        allowed_logout_urls: ["http://localhost", "https://contoso.com"], // Mix of insecure and secure URLs
+      },
+    };
+
+    checkTenantLogoutUrl(options, (report) => {
+      expect(report).to.deep.equal([
+        {
+          field: "invalid_allowed_logout_urls",
+          attr: "allowed_logout_urls",
+          value: "http://localhost",
+          status: CONSTANTS.FAIL,
+        },
+        {
+          field: "allowed_logout_urls",
+          attr: "allowed_logout_urls",
+          value: "https://contoso.com",
+          status: CONSTANTS.SUCCESS,
+        },
+      ]);
+    });
+  });
+});