@johnnyboy11234/esg-idea-contest 0.3.0 → 0.3.1

package/testdata/password.json

@@ -0,0 +1,425 @@
+{
+ "description": "Shared by backend (Go) and frontend (TS). password and empNo are raw strings; empNo is \"\" when the submitted employee ID is malformed (CONTAINS_EMP_NO is then skipped). wantRules lists every violated rule id in PRD 6.4 table order ([] = valid). Rules not implemented yet (SEQUENCE, COMMON_PASSWORD: B1b-03 and later) have no cases here; those cases are added with their rules, and these inputs avoid triggering them. PRD 6.4.",
+ "cases": [
+  {
+   "id": "valid-typical",
+   "password": "Correct-Horse-1",
+   "empNo": "089290",
+   "wantRules": []
+  },
+  {
+   "id": "valid-min-length-12",
+   "password": "Abcdefgh1!xY",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-max-length-64",
+   "password": "Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-space-is-symbol",
+   "password": "Correct Horse1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-symbol",
+   "password": "CorrectHorse12",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-digit",
+   "password": "Correct-Horse-x",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-upper",
+   "password": "correct-horse-1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-lower",
+   "password": "CORRECT-HORSE-1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "length-11",
+   "password": "Abcdefgh1!x",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH"
+   ]
+  },
+  {
+   "id": "length-65",
+   "password": "Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!x",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH"
+   ]
+  },
+  {
+   "id": "length-empty",
+   "password": "",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "length-counts-code-points-not-bytes",
+   "password": "Aa1!Aa1!Aa1é",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-non-ascii",
+   "password": "Correct-Horse-1é",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-cjk-only-12",
+   "password": "密碼密碼密碼密碼密碼密碼",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET",
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "charset-tab",
+   "password": "Correct\tHorse-1",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-del",
+   "password": "Correct-Horse-1",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-emoji-counts-as-one-code-point",
+   "password": "Correct-Hor1😀",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "complexity-two-classes-lower-digit",
+   "password": "abcdefghij12",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "complexity-two-classes-lower-symbol",
+   "password": "whatever-goes",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "complexity-two-classes-upper-lower",
+   "password": "CorrectHorseXy",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "complexity-non-ascii-is-no-class",
+   "password": "abcdefghijk1é",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET",
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "repeat-three-lower",
+   "password": "Correct-Hoooorse1",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "repeat-three-digit",
+   "password": "Correct-Horse111",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "repeat-exactly-two-ok",
+   "password": "Correct-Hoorse-11",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "repeat-case-sensitive",
+   "password": "Correct-HoOorse-1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "repeat-symbols",
+   "password": "Correct-Horse1!!!",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "emp-no-contained",
+   "password": "Correct-089290-Ab",
+   "empNo": "089290",
+   "wantRules": [
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "emp-no-contained-at-start",
+   "password": "089290-Correct-Ab",
+   "empNo": "089290",
+   "wantRules": [
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "emp-no-skipped-when-malformed",
+   "password": "Correct-089290-Ab",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "emp-no-other-number-ok",
+   "password": "Correct-089291-Ab",
+   "empNo": "089290",
+   "wantRules": []
+  },
+  {
+   "id": "table-order-all-violated",
+   "password": "aaaé",
+   "empNo": "123456",
+   "wantRules": [
+    "LENGTH",
+    "CHARSET",
+    "COMPLEXITY",
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "table-order-with-emp-no",
+   "password": "aaa123456",
+   "empNo": "123456",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY",
+    "KEYBOARD_RUN",
+    "REPEAT",
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "table-order-full-set",
+   "password": "aaaaaaaaaaaaé123456",
+   "empNo": "123456",
+   "wantRules": [
+    "CHARSET",
+    "COMPLEXITY",
+    "KEYBOARD_RUN",
+    "REPEAT",
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "keyboard-row-digits",
+   "password": "Xk9-1234-Pmzj",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-row-qwer",
+   "password": "Zq-qwer-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-row-asdf",
+   "password": "Zq-Asdf-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-row-bottom",
+   "password": "Zq-xcvb-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-reverse",
+   "password": "Zq-rewq-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-reverse-digits",
+   "password": "Zq-4321-Mj8P",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-case-insensitive",
+   "password": "Zq-qWeR-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-shifted-symbols",
+   "password": "Zq-!@#$-Mjkp",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-mixed-shift-and-plain",
+   "password": "Zq-1@3$-Mjkp",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-longer-run-reported-once",
+   "password": "Zq-qwertyu-M1",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-run-at-start",
+   "password": "qwerZk-Mj81xP",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-run-at-end",
+   "password": "Zk-Mj81xP-poiu",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-punctuation-row",
+   "password": "Zk-Mj81xP;lkj",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-three-keys-ok",
+   "password": "Zq-qwe-Mj81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-row-end-does-not-wrap-to-next-row",
+   "password": "Zq-90-qw-Mj81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-rows-do-not-join",
+   "password": "Zq-pasdMj81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-direction-change-ok",
+   "password": "Zq-qwewq-Mj81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-gap-ok",
+   "password": "Zq-qwdf-Mj81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-non-row-glyph-breaks-run",
+   "password": "Zq-qw~er-Mj81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-repeat-is-not-a-run",
+   "password": "Zq-qqqq-Mj81xP",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "keyboard-and-complexity",
+   "password": "qwertyuiopas",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY",
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-before-repeat-in-table-order",
+   "password": "Zq-1234-aaa-Mj",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN",
+    "REPEAT"
+   ]
+  }
+ ]
+}

package/testdata/permission-matrix.json

@@ -68,6 +68,54 @@
         "admin": { "status": 200 }
       }
     },
+    {
+      "id": "create-idea",
+      "operation": "create Idea",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "OPEN",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 201 },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "create-idea-not-open",
+      "operation": "create Idea before the contest opens",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "NOT_OPEN",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "SUBMISSION_NOT_OPEN" },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "create-idea-closed",
+      "operation": "create Idea after the deadline",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "CLOSED",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "SUBMISSION_CLOSED" },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
     {
       "id": "order-logout-no-csrf",
       "operation": "check order: a write without a CSRF token",

package/testdata/schema/expected-filename.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "expected-filename.schema.json",
+  "title": "Expected filename cases",
+  "description": "Shared front-end/back-end cases for PRD 6.8 (filename base) and PRD 6.2 (255 UTF-8 byte limit measured with .pptx).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["cases"],
+  "properties": {
+    "description": { "type": "string" },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "category", "org", "leaderName", "leaderEmpNo", "ideaName", "wantBase", "wantBytes", "wantTooLong"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "category": { "enum": ["COOL_IDEA", "OUTSTANDING_IMPACT"] },
+          "org": { "enum": ["AAID", "BSID", "ICSD", "TSID", "PLED", "DEID"] },
+          "leaderName": { "type": "string" },
+          "leaderEmpNo": { "type": "string" },
+          "ideaName": { "type": "string" },
+          "wantBase": { "type": "string" },
+          "wantBytes": { "type": "integer", "minimum": 1 },
+          "wantTooLong": { "type": "boolean" }
+        }
+      }
+    }
+  }
+}

package/testdata/schema/password.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "password.schema.json",
+  "title": "Password policy cases",
+  "description": "Shared front-end/back-end cases for PRD 6.4: every violated rule id, in table order.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "cases"
+  ],
+  "properties": {
+    "description": {
+      "type": "string"
+    },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "password",
+          "empNo",
+          "wantRules"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "password": {
+            "type": "string"
+          },
+          "empNo": {
+            "type": "string",
+            "pattern": "^([0-9]{6})?$"
+          },
+          "wantRules": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": {
+              "enum": [
+                "LENGTH",
+                "CHARSET",
+                "COMPLEXITY",
+                "COMMON_PASSWORD",
+                "KEYBOARD_RUN",
+                "SEQUENCE",
+                "REPEAT",
+                "CONTAINS_EMP_NO"
+              ]
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/testdata/schema/permission-matrix.schema.json

@@ -14,13 +14,34 @@
         "type": "object",
         "additionalProperties": false,
         "required": ["id", "operation", "method", "path", "expect"],
+        "not": { "required": ["body", "multipart"] },
         "properties": {
           "id": { "type": "string", "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$" },
           "operation": { "type": "string", "minLength": 1 },
           "method": { "enum": ["GET", "POST", "PUT", "PATCH", "DELETE"] },
           "path": { "type": "string", "pattern": "^/api/v1/" },
           "body": { "type": "object" },
+          "multipart": {
+            "description": "multipart/form-data body instead of JSON. Text values and the filename may use ${actorEmpNo} and ${actorName}.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["fields", "file"],
+            "properties": {
+              "fields": { "type": "object", "additionalProperties": { "type": "string" } },
+              "file": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["field", "filename", "content"],
+                "properties": {
+                  "field": { "type": "string" },
+                  "filename": { "type": "string" },
+                  "content": { "enum": ["pdf"] }
+                }
+              }
+            }
+          },
           "csrf": { "enum": ["valid", "none"], "default": "valid" },
+          "state": { "enum": ["NOT_OPEN", "OPEN", "CLOSED"], "description": "Submission state set before the row runs (PRD §5); omitted = unchanged." },
           "outsideSpec": { "type": "boolean", "default": false },
           "expect": {
             "type": "object",