@johnnyboy11234/esg-idea-contest 0.3.0 → 0.3.2

package/testdata/password.json

@@ -0,0 +1,582 @@
+{
+ "description": "Shared by backend (Go) and frontend (TS). password and empNo are raw strings; empNo is \"\" when the submitted employee ID is malformed (CONTAINS_EMP_NO is then skipped). wantRules lists every violated rule id in PRD 6.4 table order ([] = valid). One substring may violate several rules (\"1234\" is KEYBOARD_RUN and SEQUENCE). COMMON_PASSWORD uses backend/internal/account/internal/passwords/common-passwords.txt (whole password, case-insensitive, nothing trimmed). PRD 6.4.",
+ "cases": [
+  {
+   "id": "valid-typical",
+   "password": "Correct-Horse-1",
+   "empNo": "089290",
+   "wantRules": []
+  },
+  {
+   "id": "valid-min-length-12",
+   "password": "Azkqmvrt1!xY",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-max-length-64",
+   "password": "Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-space-is-symbol",
+   "password": "Correct Horse1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-symbol",
+   "password": "CorrectHorse12",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-digit",
+   "password": "Correct-Horse-x",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-upper",
+   "password": "correct-horse-1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "valid-three-classes-no-lower",
+   "password": "CORRECT-HORSE-1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "length-11",
+   "password": "Azkqmvrt1!x",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH"
+   ]
+  },
+  {
+   "id": "length-65",
+   "password": "Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!Ab1!x",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH"
+   ]
+  },
+  {
+   "id": "length-empty",
+   "password": "",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "length-counts-code-points-not-bytes",
+   "password": "Aa1!Aa1!Aa1é",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-non-ascii",
+   "password": "Correct-Horse-1é",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-cjk-only-12",
+   "password": "密碼密碼密碼密碼密碼密碼",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET",
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "charset-tab",
+   "password": "Correct\tHorse-1",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-del",
+   "password": "Correct-Horse-1",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "charset-emoji-counts-as-one-code-point",
+   "password": "Correct-Hor1😀",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET"
+   ]
+  },
+  {
+   "id": "complexity-two-classes-lower-digit",
+   "password": "azkqmvrtjx12",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "complexity-two-classes-lower-symbol",
+   "password": "whatever-goes",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "complexity-two-classes-upper-lower",
+   "password": "CorrectHorseXy",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "complexity-non-ascii-is-no-class",
+   "password": "azkqmvrtjxp1é",
+   "empNo": "",
+   "wantRules": [
+    "CHARSET",
+    "COMPLEXITY"
+   ]
+  },
+  {
+   "id": "repeat-three-lower",
+   "password": "Correct-Hoooorse1",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "repeat-three-digit",
+   "password": "Correct-Horse111",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "repeat-exactly-two-ok",
+   "password": "Correct-Hoorse-11",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "repeat-case-sensitive",
+   "password": "Correct-HoOorse-1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "repeat-symbols",
+   "password": "Correct-Horse1!!!",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "emp-no-contained",
+   "password": "Correct-089290-Ab",
+   "empNo": "089290",
+   "wantRules": [
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "emp-no-contained-at-start",
+   "password": "089290-Correct-Ab",
+   "empNo": "089290",
+   "wantRules": [
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "emp-no-skipped-when-malformed",
+   "password": "Correct-089290-Ab",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "emp-no-other-number-ok",
+   "password": "Correct-089291-Ab",
+   "empNo": "089290",
+   "wantRules": []
+  },
+  {
+   "id": "table-order-all-violated",
+   "password": "aaaé",
+   "empNo": "123456",
+   "wantRules": [
+    "LENGTH",
+    "CHARSET",
+    "COMPLEXITY",
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "table-order-with-emp-no",
+   "password": "aaa123456",
+   "empNo": "123456",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY",
+    "KEYBOARD_RUN",
+    "SEQUENCE",
+    "REPEAT",
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "table-order-full-set",
+   "password": "aaaaaaaaaaaaé123456",
+   "empNo": "123456",
+   "wantRules": [
+    "CHARSET",
+    "COMPLEXITY",
+    "KEYBOARD_RUN",
+    "SEQUENCE",
+    "REPEAT",
+    "CONTAINS_EMP_NO"
+   ]
+  },
+  {
+   "id": "keyboard-row-digits",
+   "password": "Xk9-1234-Pmzj",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN",
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "keyboard-row-qwer",
+   "password": "Zq-qwer-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-row-asdf",
+   "password": "Zq-Asdf-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-row-bottom",
+   "password": "Zq-xcvb-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-reverse",
+   "password": "Zq-rewq-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-reverse-digits",
+   "password": "Zq-4321-Mj8P",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN",
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "keyboard-case-insensitive",
+   "password": "Zq-qWeR-Mj81",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-shifted-symbols",
+   "password": "Zq-!@#$-Mjkp",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-mixed-shift-and-plain",
+   "password": "Zq-1@3$-Mjkp",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-longer-run-reported-once",
+   "password": "Zq-qwertyu-M1",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-run-at-start",
+   "password": "qwerZk-Mj81xP",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-run-at-end",
+   "password": "Zk-Mj81xP-poiu",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-punctuation-row",
+   "password": "Zk-Mj81xP;lkj",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-three-keys-ok",
+   "password": "Zq-qwe-Mj81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-row-end-does-not-wrap-to-next-row",
+   "password": "Zq-90-qw-Mj81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-rows-do-not-join",
+   "password": "Zq-pasdMj81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-direction-change-ok",
+   "password": "Zq-qwewq-Mj81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-gap-ok",
+   "password": "Zq-qwdf-Mj81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-non-row-glyph-breaks-run",
+   "password": "Zq-qw~er-Mj81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "keyboard-repeat-is-not-a-run",
+   "password": "Zq-qqqq-Mj81xP",
+   "empNo": "",
+   "wantRules": [
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "keyboard-and-complexity",
+   "password": "qwertyuiopas",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY",
+    "KEYBOARD_RUN"
+   ]
+  },
+  {
+   "id": "keyboard-before-repeat-in-table-order",
+   "password": "Zq-1234-aaa-Mj",
+   "empNo": "",
+   "wantRules": [
+    "KEYBOARD_RUN",
+    "SEQUENCE",
+    "REPEAT"
+   ]
+  },
+  {
+   "id": "sequence-alpha-ascending",
+   "password": "Zq-abcd-M81x",
+   "empNo": "",
+   "wantRules": [
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "sequence-alpha-descending",
+   "password": "Zq-dcba-M81x",
+   "empNo": "",
+   "wantRules": [
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "sequence-case-insensitive",
+   "password": "Zq-aBcD-M81x",
+   "empNo": "",
+   "wantRules": [
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "sequence-digits-not-a-keyboard-run",
+   "password": "Zq-0123-Mkpx",
+   "empNo": "",
+   "wantRules": [
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "sequence-digits-descending-not-a-keyboard-run",
+   "password": "Zq-3210-Mkpx",
+   "empNo": "",
+   "wantRules": [
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "sequence-longer-run-reported-once",
+   "password": "Zq-abcdefg-M1",
+   "empNo": "",
+   "wantRules": [
+    "SEQUENCE"
+   ]
+  },
+  {
+   "id": "sequence-three-ok",
+   "password": "Zq-abc-M81xPk",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "sequence-alpha-does-not-wrap",
+   "password": "Zq-xyza-M81p",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "sequence-digits-do-not-wrap",
+   "password": "Zq-9012-Mkpx",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "sequence-direction-change-ok",
+   "password": "Zq-abcba-M81x",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "sequence-repeat-breaks-run",
+   "password": "Zq-abbc-M81xP",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "sequence-letters-and-digits-do-not-join",
+   "password": "Zq-89ab-Mkpx",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "sequence-ascii-neighbour-does-not-join",
+   "password": "Zq-xyz{-Mk81",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "common-exact",
+   "password": "password",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY",
+    "COMMON_PASSWORD"
+   ]
+  },
+  {
+   "id": "common-case-insensitive",
+   "password": "Films+Pic+Galeries",
+   "empNo": "",
+   "wantRules": [
+    "COMMON_PASSWORD"
+   ]
+  },
+  {
+   "id": "common-lower-case-entry",
+   "password": "films+pic+galeries",
+   "empNo": "",
+   "wantRules": [
+    "COMPLEXITY",
+    "COMMON_PASSWORD"
+   ]
+  },
+  {
+   "id": "common-upper-case",
+   "password": "PASSWORD",
+   "empNo": "",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY",
+    "COMMON_PASSWORD"
+   ]
+  },
+  {
+   "id": "common-not-trimmed",
+   "password": " Films+Pic+Galeries",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "common-entry-inside-longer-password-ok",
+   "password": "Films+Pic+Galeries1",
+   "empNo": "",
+   "wantRules": []
+  },
+  {
+   "id": "table-order-common-and-runs",
+   "password": "123456",
+   "empNo": "123456",
+   "wantRules": [
+    "LENGTH",
+    "COMPLEXITY",
+    "COMMON_PASSWORD",
+    "KEYBOARD_RUN",
+    "SEQUENCE",
+    "CONTAINS_EMP_NO"
+   ]
+  }
+ ]
+}

package/testdata/permission-matrix.json

@@ -68,6 +68,77 @@
         "admin": { "status": 200 }
       }
     },
+    {
+      "id": "create-idea",
+      "operation": "create Idea",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "OPEN",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 201 },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "create-idea-not-open",
+      "operation": "create Idea before the contest opens",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "NOT_OPEN",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "SUBMISSION_NOT_OPEN" },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "create-idea-closed",
+      "operation": "create Idea after the deadline",
+      "method": "POST",
+      "path": "/api/v1/ideas",
+      "multipart": {
+        "fields": { "category": "COOL_IDEA", "org": "BSID", "direction": "TALENT_DEVELOPMENT", "name": "Matrix Idea", "summary": "Matrix summary" },
+        "file": { "field": "slides", "filename": "I_BSID_${actorName}_${actorEmpNo}_Matrix Idea.pdf", "content": "pdf" }
+      },
+      "state": "CLOSED",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 403, "code": "SUBMISSION_CLOSED" },
+        "admin": { "status": 403, "code": "FORBIDDEN" }
+      }
+    },
+    {
+      "id": "download-slides-missing",
+      "operation": "download slides of a missing Idea (uniform 404; cells for an existing Idea are in internal/idea/download_integration_test.go)",
+      "method": "GET",
+      "path": "/api/v1/ideas/00000000-0000-4000-8000-000000000000/slides",
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 404, "code": "NOT_FOUND" },
+        "admin": { "status": 404, "code": "NOT_FOUND" }
+      }
+    },
+    {
+      "id": "download-slides-head",
+      "operation": "HEAD on the slide download: 405, never the GET handler (D47)",
+      "method": "HEAD",
+      "path": "/api/v1/ideas/00000000-0000-4000-8000-000000000000/slides",
+      "outsideSpec": true,
+      "expect": {
+        "visitor": { "status": 401, "code": "UNAUTHENTICATED" },
+        "user": { "status": 405, "code": "METHOD_NOT_ALLOWED" },
+        "admin": { "status": 405, "code": "METHOD_NOT_ALLOWED" }
+      }
+    },
     {
       "id": "order-logout-no-csrf",
       "operation": "check order: a write without a CSRF token",

package/testdata/schema/expected-filename.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "expected-filename.schema.json",
+  "title": "Expected filename cases",
+  "description": "Shared front-end/back-end cases for PRD 6.8 (filename base) and PRD 6.2 (255 UTF-8 byte limit measured with .pptx).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["cases"],
+  "properties": {
+    "description": { "type": "string" },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "category", "org", "leaderName", "leaderEmpNo", "ideaName", "wantBase", "wantBytes", "wantTooLong"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "category": { "enum": ["COOL_IDEA", "OUTSTANDING_IMPACT"] },
+          "org": { "enum": ["AAID", "BSID", "ICSD", "TSID", "PLED", "DEID"] },
+          "leaderName": { "type": "string" },
+          "leaderEmpNo": { "type": "string" },
+          "ideaName": { "type": "string" },
+          "wantBase": { "type": "string" },
+          "wantBytes": { "type": "integer", "minimum": 1 },
+          "wantTooLong": { "type": "boolean" }
+        }
+      }
+    }
+  }
+}