@johnnyboy11234/esg-idea-contest 0.2.4 → 0.3.1

package/testdata/permission-matrix.json

@@ -0,0 +1,157 @@
+{
+  "rows": [
+    {
+      "id": "csrf",
+      "operation": "csrf",
+      "method": "GET",
+      "path": "/api/v1/auth/csrf",
+      "expect": {
+        "visitor": { "status": 200 },
+        "user": { "status": 200 },
+        "admin": { "status": 200 }
+      }
+    },
+    {
+      "id": "deadline",
+      "operation": "deadline",
+      "method": "GET",
+      "path": "/api/v1/deadline",
+      "expect": {
+        "visitor": { "status": 200 },
+        "user": { "status": 200 },
+        "admin": { "status": 200 }
+      }
+    },
+    {
+      "id": "register",
+      "operation": "register",
+      "method": "POST",
+      "path": "/api/v1/auth/register",
+      "body": { "empNo": "${newEmpNo}", "name": "Matrix Person", "email": "${newEmpNo}@example.com", "password": "${password}" },
+      "expect": {
+        "visitor": { "status": 201 },
+        "user": { "status": 201 },
+        "admin": { "status": 201 }
+      }
+    },
+    {
+      "id": "login",
+      "operation": "login",
+      "method": "POST",
+      "path": "/api/v1/auth/login",
+      "body": { "empNo": "${actorEmpNo}", "password": "${password}" },
+      "expect": {
+        "visitor": { "status": 401, "code": "INVALID_CREDENTIALS" },
+        "user": { "status": 200 },
+        "admin": { "status": 200 }
+      }
+    },
+    {
+      "id": "logout",
+      "operation": "logout",
+      "method": "POST",
+      "path": "/api/v1/auth/logout",
+      "expect": {
+        "visitor": { "status": 204 },
+        "user": { "status": 204 },
+        "admin": { "status": 204 }
+      }
+    },
+    {
+      "id": "me",
+      "operation": "me",
+      "method": "GET",
+      "path": "/api/v1/auth/me",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 200 },
+        "admin": { "status": 200 }
+      }
+    },
+    {
+      "id": "create-idea",
+      "operation": "create Idea",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "OPEN",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 201 },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "create-idea-not-open",
+      "operation": "create Idea before the contest opens",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "NOT_OPEN",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "SUBMISSION_NOT_OPEN" },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "create-idea-closed",
+      "operation": "create Idea after the deadline",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "CLOSED",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "SUBMISSION_CLOSED" },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "order-logout-no-csrf",
+      "operation": "check order: a write without a CSRF token",
+      "method": "POST",
+      "path": "/api/v1/auth/logout",
+      "csrf": "none",
+      "expect": {
+        "visitor": { "status": 403, "code": "CSRF_INVALID" },
+        "user": { "status": 403, "code": "CSRF_INVALID" },
+        "admin": { "status": 403, "code": "CSRF_INVALID" }
+      }
+    },
+    {
+      "id": "order-unknown-write-no-csrf",
+      "operation": "check order: 401 before CSRF on a path outside the contract",
+      "method": "POST",
+      "path": "/api/v1/matrix-unknown",
+      "csrf": "none",
+      "outsideSpec": true,
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "CSRF_INVALID" },
+        "admin": { "status": 403, "code": "CSRF_INVALID" }
+      }
+    },
+    {
+      "id": "order-unknown-write-csrf",
+      "operation": "check order: CSRF before 404 on a path outside the contract",
+      "method": "POST",
+      "path": "/api/v1/matrix-unknown",
+      "outsideSpec": true,
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 404, "code": "NOT_FOUND" },
+        "admin": { "status": 404, "code": "NOT_FOUND" }
+      }
+    }
+  ]
+}

package/testdata/schema/expected-filename.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "expected-filename.schema.json",
+  "title": "Expected filename cases",
+  "description": "Shared front-end/back-end cases for PRD 6.8 (filename base) and PRD 6.2 (255 UTF-8 byte limit measured with .pptx).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["cases"],
+  "properties": {
+    "description": { "type": "string" },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "category", "org", "leaderName", "leaderEmpNo", "ideaName", "wantBase", "wantBytes", "wantTooLong"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "category": { "enum": ["COOL_IDEA", "OUTSTANDING_IMPACT"] },
+          "org": { "enum": ["AAID", "BSID", "ICSD", "TSID", "PLED", "DEID"] },
+          "leaderName": { "type": "string" },
+          "leaderEmpNo": { "type": "string" },
+          "ideaName": { "type": "string" },
+          "wantBase": { "type": "string" },
+          "wantBytes": { "type": "integer", "minimum": 1 },
+          "wantTooLong": { "type": "boolean" }
+        }
+      }
+    }
+  }
+}

package/testdata/schema/password.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "password.schema.json",
+  "title": "Password policy cases",
+  "description": "Shared front-end/back-end cases for PRD 6.4: every violated rule id, in table order.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "cases"
+  ],
+  "properties": {
+    "description": {
+      "type": "string"
+    },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "password",
+          "empNo",
+          "wantRules"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "password": {
+            "type": "string"
+          },
+          "empNo": {
+            "type": "string",
+            "pattern": "^([0-9]{6})?$"
+          },
+          "wantRules": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": {
+              "enum": [
+                "LENGTH",
+                "CHARSET",
+                "COMPLEXITY",
+                "COMMON_PASSWORD",
+                "KEYBOARD_RUN",
+                "SEQUENCE",
+                "REPEAT",
+                "CONTAINS_EMP_NO"
+              ]
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/testdata/schema/permission-matrix.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "permission-matrix.schema.json",
+  "title": "Permission matrix",
+  "description": "PRD §7 as data: one row per operation (or check-order case), one expected cell per actor. Read by backend/test/matrix. Later PRs add their rows and actors.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["rows"],
+  "properties": {
+    "rows": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "operation", "method", "path", "expect"],
+        "not": { "required": ["body", "multipart"] },
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$" },
+          "operation": { "type": "string", "minLength": 1 },
+          "method": { "enum": ["GET", "POST", "PUT", "PATCH", "DELETE"] },
+          "path": { "type": "string", "pattern": "^/api/v1/" },
+          "body": { "type": "object" },
+          "multipart": {
+            "description": "multipart/form-data body instead of JSON. Text values and the filename may use ${actorEmpNo} and ${actorName}.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["fields", "file"],
+            "properties": {
+              "fields": { "type": "object", "additionalProperties": { "type": "string" } },
+              "file": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["field", "filename", "content"],
+                "properties": {
+                  "field": { "type": "string" },
+                  "filename": { "type": "string" },
+                  "content": { "enum": ["pdf"] }
+                }
+              }
+            }
+          },
+          "csrf": { "enum": ["valid", "none"], "default": "valid" },
+          "state": { "enum": ["NOT_OPEN", "OPEN", "CLOSED"], "description": "Submission state set before the row runs (PRD §5); omitted = unchanged." },
+          "outsideSpec": { "type": "boolean", "default": false },
+          "expect": {
+            "type": "object",
+            "additionalProperties": false,
+            "minProperties": 1,
+            "properties": {
+              "visitor": { "$ref": "#/$defs/cell" },
+              "user": { "$ref": "#/$defs/cell" },
+              "member": { "$ref": "#/$defs/cell" },
+              "leader": { "$ref": "#/$defs/cell" },
+              "admin": { "$ref": "#/$defs/cell" }
+            }
+          }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "cell": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status"],
+      "properties": {
+        "status": { "type": "integer", "minimum": 200, "maximum": 599 },
+        "code": { "type": "string", "pattern": "^[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$" }
+      }
+    }
+  }
+}