@northern.tech/testing 0.1.0

package/dist/requestHandlers/organizationHandlers.cjs

@@ -0,0 +1,968 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/requestHandlers/organizationHandlers.ts
+var organizationHandlers_exports = {};
+__export(organizationHandlers_exports, {
+  organizationHandlers: () => organizationHandlers
+});
+module.exports = __toCommonJS(organizationHandlers_exports);
+var import_constants2 = require("@northern.tech/utils/constants");
+var import_msw = require("msw");
+
+// src/mockData.ts
+var import_constants = require("@northern.tech/utils/constants");
+var TEST_SESSION_DATETIME = "2019-01-13T13:00:00.000Z";
+var testDate = new Date(TEST_SESSION_DATETIME);
+var mockDate = new Date(testDate.setMilliseconds(testDate.getMilliseconds() + import_constants.maxSessionAge));
+var defaultCreationDate = "2019-01-13T06:25:00.000Z";
+var defaultMacAddress = "dc:a6:32:12:ad:bf";
+var permissionSetObjectTypes = {
+  any: "Any",
+  artifacts: "Artifacts",
+  empty: "",
+  groups: "Device groups",
+  releases: "Releases",
+  tenantManagement: "Tenant management",
+  userManagement: "User management"
+};
+var commonEndpoints = {
+  artifacts: "^/api/management/v1/deployments/artifacts",
+  artifactDetails: "^/api/management/v1/deployments/artifacts/[^/]+",
+  deviceManagement: "^/api/management/(v[1-9])/(devauth|inventory)/"
+};
+var webhookEvents = [
+  {
+    id: "1",
+    type: "device-status-changed",
+    data: { id: "1", status: "accepted" },
+    time: "2020-09-01T12:00:00.000Z",
+    delivery_statuses: [{ integration_id: "1", success: true, status_code: 200 }]
+  },
+  {
+    id: "2",
+    type: "device-status-changed",
+    data: { id: "3", status: "accepted" },
+    time: "2020-09-01T12:00:05.000Z",
+    delivery_statuses: [{ integration_id: "1", success: true, status_code: 200 }]
+  }
+];
+var userId = "a30a780b-b843-5344-80e3-0fd95a4f6fc3";
+var defaultUser = {
+  created_ts: "2019-01-01T10:30:00.000Z",
+  email: "a@b.com",
+  id: "a1",
+  roles: ["RBAC_ROLE_PERMIT_ALL"],
+  tfa_status: "enabled",
+  verified: true
+};
+var deviceTypes = { qemu: "qemux86-64" };
+var checkInTimeRounded = "2019-01-01T00:00:00.000Z";
+var checkInTimeExact = "2019-01-01T10:25:00.000Z";
+var mockApiResponses = {
+  deployments: {
+    byId: {
+      d1: {
+        id: "d1",
+        name: "test deployment",
+        created: "2019-01-01T12:30:00.000Z",
+        devices: {
+          a1: {
+            id: "a1",
+            status: "installing",
+            attributes: {},
+            image: { size: 123 }
+          }
+        },
+        statistics: {
+          status: {
+            "already-installed": 0,
+            decommissioned: 0,
+            downloading: 0,
+            failure: 0,
+            installing: 1,
+            noartifact: 0,
+            pending: 0,
+            rebooting: 0,
+            success: 0
+          },
+          total_size: 1234
+        }
+      },
+      d2: {
+        id: "d2",
+        name: "test deployment 2",
+        artifact_name: "r1",
+        artifacts: ["123"],
+        created: "2019-01-01T12:25:00.000Z",
+        device_count: 1,
+        devices: {
+          b1: {
+            attributes: {},
+            id: "b1",
+            status: "pending"
+          }
+        },
+        filter: void 0,
+        group: void 0,
+        statistics: {
+          status: {
+            downloading: 0,
+            decommissioned: 0,
+            failure: 0,
+            installing: 0,
+            noartifact: 0,
+            pending: 1,
+            rebooting: 0,
+            success: 0,
+            "already-installed": 0
+          }
+        }
+      },
+      d3: {
+        id: "d3",
+        name: "Test",
+        phases: [
+          { id: "0", batch_size: 2, device_count: 2 },
+          { id: "1", start_ts: "2019-02-04T11:45:10.002Z", batch_size: 3, device_count: 3 },
+          { id: "2", start_ts: "2019-02-05T11:45:10.002Z", batch_size: 5, device_count: 5 },
+          { id: "3", start_ts: "2019-02-06T11:45:10.002Z", batch_size: 5, device_count: 5 },
+          { id: "4", start_ts: "2019-02-21T11:45:10.002Z", batch_size: 5, device_count: 0 }
+        ],
+        max_devices: 0,
+        created: "2019-01-31T12:59:30.020Z",
+        devices: {},
+        filter: void 0,
+        group: void 0,
+        stats: {
+          pending: 3,
+          decommissioned: 0,
+          failure: 23,
+          pause_before_committing: 0,
+          pause_before_rebooting: 0,
+          installing: 0,
+          rebooting: 0,
+          "already-installed": 0,
+          pause_before_installing: 0,
+          downloading: 0,
+          success: 6,
+          aborted: 0,
+          noartifact: 0
+        },
+        statistics: { total_size: "1234" },
+        status: "inprogress",
+        active: true,
+        device_count: 100,
+        retries: "0",
+        type: "software"
+      }
+    },
+    byStatus: {
+      pending: { deploymentIds: ["d2"] },
+      inprogress: { deploymentIds: ["d3"] }
+    }
+  },
+  devices: {
+    byId: {
+      a1: {
+        id: "a1",
+        auth_sets: [
+          {
+            id: "auth1",
+            identity_data: { mac: defaultMacAddress },
+            pubkey: "-----BEGIN PUBLIC KEY-----\nMIIBojWELzgJ62hcXIhAfqfoNiaB1326XZByZwcnHr5BuSPAgMBAAE=\n-----END PUBLIC KEY-----\n",
+            status: "accepted",
+            ts: defaultCreationDate
+          }
+        ],
+        updated_ts: "2019-01-01T09:25:00.000Z"
+      },
+      b1: {
+        id: "b1",
+        attributes: {
+          ipv4_wlan0: "192.168.10.141/24",
+          device_type: [deviceTypes.qemu]
+        },
+        system: {
+          check_in_time: checkInTimeRounded
+        },
+        check_in_time: checkInTimeExact,
+        check_in_time_exact: checkInTimeExact,
+        check_in_time_rounded: checkInTimeRounded,
+        identity_data: { mac: defaultMacAddress },
+        status: "accepted",
+        decommissioning: false,
+        created_ts: defaultCreationDate,
+        updated_ts: "2019-01-01T09:25:00.000Z",
+        auth_sets: [
+          {
+            id: "auth1",
+            identity_data: { mac: defaultMacAddress },
+            pubkey: "-----BEGIN PUBLIC KEY-----\nMIIBojWELzgJ62hcXIhAfqfoNiaB1326XZByZwcnHr5BuSPAgMBAAE=\n-----END PUBLIC KEY-----\n",
+            ts: defaultCreationDate,
+            status: "accepted"
+          }
+        ]
+      }
+    },
+    groups: {
+      byId: {
+        testGroup: {
+          deviceIds: ["a1", "b1"],
+          filters: [],
+          total: 2
+        },
+        testGroupDynamic: {
+          id: "filter1",
+          name: "filter1",
+          filters: [{ scope: "system", key: "group", operator: "$eq", value: "things" }]
+        }
+      }
+    },
+    limit: 500,
+    byStatus: {
+      accepted: { deviceIds: ["a1", "b1"], total: 2 },
+      active: { deviceIds: [], total: 0 },
+      inactive: { deviceIds: [], total: 0 },
+      pending: { deviceIds: ["c1"], total: 1 },
+      preauthorized: { deviceIds: [], total: 0 },
+      rejected: { deviceIds: [], total: 0 }
+    }
+  },
+  organization: {
+    organization: {
+      id: "1",
+      addons: [],
+      name: "test",
+      plan: "os",
+      trial: false
+    },
+    intentId: "testIntent",
+    auditlog: {
+      events: [
+        {
+          actor: {
+            id: "string",
+            type: "user",
+            email: "string@example.com"
+          },
+          time: "2019-01-01T12:10:22.667Z",
+          action: "create",
+          object: {
+            id: "string",
+            type: "user",
+            user: {
+              email: "user@acme.com"
+            }
+          },
+          change: "change1"
+        },
+        {
+          actor: {
+            id: "string",
+            type: "user",
+            email: "string",
+            identity_data: "string"
+          },
+          time: "2019-01-01T12:16:22.667Z",
+          action: "create",
+          object: {
+            id: "string",
+            type: "deployment",
+            deployment: {
+              name: "production",
+              artifact_name: "Application 0.0.1"
+            }
+          },
+          change: "change2"
+        },
+        {
+          actor: {
+            id: "string",
+            type: "user",
+            email: "string@example.com"
+          },
+          time: "2019-01-01T12:10:22.669Z",
+          action: "open_terminal",
+          meta: {
+            session_id: ["abd313a8-ee88-48ab-9c99-fbcd80048e6e"]
+          },
+          object: {
+            id: "a1",
+            type: "device"
+          },
+          change: "change3"
+        }
+      ]
+    }
+  },
+  releases: {
+    byId: {
+      r1: {
+        name: "r1",
+        artifacts: [
+          {
+            id: "art1",
+            description: "test description",
+            device_types_compatible: [deviceTypes.qemu],
+            modified: "2020-09-10T12:16:22.667Z",
+            updates: [{ type_info: "testtype" }],
+            artifact_depends: {
+              device_type: [deviceTypes.qemu]
+            },
+            artifact_provides: {
+              artifact_name: "myapp",
+              "data-partition.myapp.version": "v2020.10",
+              list_of_fancy: [deviceTypes.qemu, "x172"]
+            },
+            clears_artifact_provides: ["data-partition.myapp.*"]
+          }
+        ],
+        device_types_compatible: [deviceTypes.qemu],
+        modified: "2020-09-10T12:16:22.667Z",
+        metaData: {}
+      }
+    }
+  },
+  users: {
+    byId: {
+      a1: defaultUser,
+      [userId]: { ...defaultUser, id: userId, email: "a2@b.com", created_ts: "2019-01-01T12:30:00.000Z" }
+    },
+    rolesById: {
+      admin: {
+        name: "admin",
+        description: "Administrator role",
+        permissions: []
+      },
+      test: { name: "test", description: "test description", permissions: [] }
+    },
+    globalSettings: {
+      "2fa": "enabled",
+      id_attribute: void 0,
+      previousFilters: []
+    },
+    userSettings: {
+      "2fa": "disabled",
+      columnSelection: [],
+      onboarding: { something: "here" },
+      tooltips: {},
+      previousFilters: []
+    }
+  }
+};
+var releasesList = Array.from({ length: 5e3 }, (x, i) => ({
+  artifacts: [
+    {
+      id: "art1",
+      description: "test description",
+      device_types_compatible: [deviceTypes.qemu],
+      modified: "2020-09-10T12:16:22.667Z",
+      updates: [{ type_info: "testtype" }],
+      artifact_depends: {
+        device_type: [deviceTypes.qemu]
+      },
+      artifact_provides: {
+        artifact_name: "myapp",
+        "data-partition.myapp.version": "v2020.10",
+        list_of_fancy: [deviceTypes.qemu, "x172"]
+      },
+      clears_artifact_provides: ["data-partition.myapp.*"]
+    }
+  ],
+  device_types_compatible: [deviceTypes.qemu],
+  metaData: {},
+  name: `release-${i + 1}`,
+  modified: i
+}));
+var permissionSets = [
+  {
+    ...import_constants.defaultPermissionSets.Basic,
+    object: permissionSetObjectTypes.empty,
+    description: "Set containing basic permissions.",
+    permissions: [
+      { action: "http", object: { type: "any", value: "^/api/management/v1/useradm/settings$" } },
+      { action: "http", object: { type: "any", value: "^/api/management/v1/useradm/users/me$" } },
+      { action: "http", object: { type: "any", value: "^/api/management/1.0/auth/verify$" } },
+      { action: "http", object: { type: "PUT", value: "^/api/management/v1/useradm/2faverify$" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/v1/useradm/users/me/2fa/(enable|disable)$" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/useradm/roles" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/tenantadm/user/tenant" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageReleases,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.releases,
+    description: "Set of permissions which allows user to manage releases",
+    permissions: [
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifacts } },
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "PUT", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "DELETE", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "GET", value: "^/api/management/v1/deployments/artifacts/[^/]+/download" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadUsers,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.userManagement,
+    description: "Set of permissions which allows user to view other users",
+    permissions: [{ action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/useradm/" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageUsers,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.userManagement,
+    description: "Set of permissions which allows user manage other user accounts",
+    permissions: [{ action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/useradm/" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadTenants,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.tenantManagement,
+    description: "Set of permissions which allows user to list other tenants and their config",
+    permissions: [
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/tenantadm/" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/(v[1-9])/tenantadm/" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageTenants,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.tenantManagement,
+    description: "Set of permissions which allows user to manage other tenants and their config",
+    permissions: [
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/tenantadm/" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/(v[1-9])/tenantadm/" } },
+      { action: "http", object: { type: "PUT", value: "^/api/management/(v[1-9])/tenantadm/" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadAuditLogs,
+    action: import_constants.uiPermissionsById.read.title,
+    object: "System Audit Log",
+    description: "Set of permissions which allows user to view system audit log",
+    permissions: [{ action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/auditlogs/logs" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.DeployToDevices,
+    action: "Deploy",
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to deploy to devices",
+    permissions: [{ action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/(deployments|deviceconfig)/" } }],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ConfigureDevices,
+    action: "Configure",
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to manage configuration of the devices",
+    permissions: [{ action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconfig/" } }],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ConnectToDevices,
+    action: "Connect",
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to use remote terminal and file transfer",
+    permissions: [
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+/connect$" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+/download\\?path=[^&]+$" } },
+      { action: "http", object: { type: "PUT", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+/upload$" } }
+    ],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.SuperUser,
+    action: "Any",
+    object: permissionSetObjectTypes.any,
+    description: "Set of permissions which allows user to do anything",
+    permissions: [{ action: "any", object: { type: "any", value: "any" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.UploadArtifacts,
+    action: "Upload",
+    object: permissionSetObjectTypes.artifacts,
+    description: "Set of permissions which allows user to upload artifacts",
+    permissions: [
+      { action: "http", object: { type: "POST", value: commonEndpoints.artifacts } },
+      { action: "http", object: { type: "POST", value: "^/api/management/v1/deployments/artifacts/generate" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadDevices,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to view devices",
+    permissions: [
+      { action: "http", object: { type: "POST", value: "^/api/management/v2/inventory/filters/search" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/v1/reporting/devices/search" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/(deployments|devauth|inventory|deviceconfig|devicemonitor)/" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+$" } }
+    ],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageDevices,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to manage devices",
+    permissions: [
+      { action: "http", object: { type: "POST", value: commonEndpoints.deviceManagement } },
+      { action: "http", object: { type: "PUT", value: commonEndpoints.deviceManagement } },
+      { action: "http", object: { type: "DELETE", value: commonEndpoints.deviceManagement } }
+    ],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadReleases,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.releases,
+    description: "Set of permissions which allows user to view releases",
+    permissions: [
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifacts } },
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "GET", value: "^/api/management/v1/deployments/artifacts/[^/]+/download" } }
+    ]
+  },
+  {
+    name: "almostAdmin",
+    object: permissionSetObjectTypes.empty,
+    description: "Set containing all the permissions.",
+    permissions: [
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/auditlogs/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/config/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/deployments/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/deployments/releases/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/devauth/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconfig/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconnect/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconnect/devices" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/inventory/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/iot-manager/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/monitor/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/useradm/.*" } }
+    ]
+  }
+];
+var rbacRoles = [
+  {
+    name: "dyn",
+    description: "",
+    permissions: [
+      { action: "CREATE_DEPLOYMENT", object: { type: "DEVICE_GROUP", value: "dyn" } },
+      { action: "VIEW_DEVICE", object: { type: "DEVICE_GROUP", value: "dyn" } }
+    ]
+  },
+  { name: "asdasd", description: "123", permissions: [{ action: "http", object: { type: "any", value: "/api/management/v1/useradm/.*" } }] },
+  {
+    name: "141sasd",
+    description: "1313adg",
+    permission_sets_with_scope: [
+      { ...import_constants.defaultPermissionSets.ReadDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["bestgroup"] } },
+      { ...import_constants.defaultPermissionSets.ConnectToDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["bestgroup"] } },
+      { ...import_constants.defaultPermissionSets.ManageUsers }
+    ]
+  },
+  {
+    name: "kljlkk",
+    description: "lkl",
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.ConnectToDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["bestgroup"] } }]
+  },
+  {
+    name: "yyyyy",
+    description: "asd",
+    permission_sets_with_scope: [
+      { ...import_constants.defaultPermissionSets.ManageDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["dockerclient"] } },
+      { ...import_constants.defaultPermissionSets.ManageReleases }
+    ]
+  },
+  {
+    name: "RBAC_ROLE_DEPLOYMENTS_MANAGER",
+    description: "Intended for users responsible for managing deployments, this role can create and abort deployments",
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.DeployToDevices }]
+  },
+  {
+    name: "RBAC_ROLE_REMOTE_TERMINAL",
+    description: `Intended for tech support accounts, this role can access the devices' Remote Terminal.`,
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.ConnectToDevices }]
+  },
+  { name: "RBAC_ROLE_PERMIT_ALL", description: "", permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.SuperUser }] },
+  {
+    name: "RBAC_ROLE_OBSERVER",
+    description: "Intended for team leaders or limited tech support accounts, this role can see all Devices, Artifacts and Deployment reports but not make any changes.",
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.ReadReleases }, { ...import_constants.defaultPermissionSets.ReadDevices }]
+  },
+  {
+    name: "RBAC_ROLE_CI",
+    description: "Intended for automation accounts building software (e.g. CI/CD systems), this role can only manage Artifacts, including upload new Artifacts and delete Artifacts. It does not have access to Devices or Deployments.",
+    permission_sets_with_scope: [
+      { ...import_constants.defaultPermissionSets.ReadReleases },
+      { ...import_constants.defaultPermissionSets.ManageReleases },
+      { ...import_constants.defaultPermissionSets.UploadArtifacts }
+    ]
+  },
+  {
+    name: "almostAdmin",
+    description: "almost admin rights",
+    permissions: permissionSets.find((item) => item.name === "almostAdmin")?.permissions
+  },
+  {
+    name: "almostAdminNew",
+    description: "almost admin rights",
+    permission_sets_with_scope: Object.values(import_constants.defaultPermissionSets)
+  }
+];
+var expectedParsedRoles = {
+  "141sasd": {
+    editable: true,
+    isCustom: void 0,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      groups: { bestgroup: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.connect.value] },
+      userManagement: [import_constants.uiPermissionsById.manage.value]
+    }
+  },
+  asdasd: {
+    editable: false,
+    isCustom: true,
+    uiPermissions: { ...import_constants.emptyUiPermissions, userManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value] }
+  },
+  dyn: {
+    editable: false,
+    isCustom: true,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      deployments: [import_constants.uiPermissionsById.deploy.value],
+      groups: { dyn: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.deploy.value] }
+    }
+  },
+  kljlkk: {
+    editable: true,
+    isCustom: false,
+    uiPermissions: { ...import_constants.emptyUiPermissions, groups: { bestgroup: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.connect.value] } }
+  },
+  yyyyy: {
+    editable: true,
+    isCustom: void 0,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      groups: { dockerclient: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value] },
+      releases: { [import_constants.ALL_RELEASES]: [import_constants.uiPermissionsById.manage.value] }
+    }
+  },
+  almostAdmin: {
+    editable: false,
+    isCustom: true,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      auditlog: [import_constants.uiPermissionsById.read.value],
+      deployments: [import_constants.uiPermissionsById.manage.value, import_constants.uiPermissionsById.deploy.value, import_constants.uiPermissionsById.read.value],
+      groups: {
+        [import_constants.ALL_DEVICES]: [
+          import_constants.uiPermissionsById.read.value,
+          // we can't assign deployment permissions to devices here, since the old path based rbac controls don't allow the scoped permissions
+          // uiPermissionsById.deploy.value,
+          import_constants.uiPermissionsById.manage.value,
+          import_constants.uiPermissionsById.connect.value,
+          import_constants.uiPermissionsById.configure.value
+        ]
+      },
+      releases: {
+        [import_constants.ALL_RELEASES]: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.upload.value, import_constants.uiPermissionsById.manage.value]
+      },
+      userManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value]
+    }
+  },
+  almostAdminNew: {
+    editable: true,
+    isCustom: void 0,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      auditlog: [import_constants.uiPermissionsById.read.value],
+      deployments: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.deploy.value, import_constants.uiPermissionsById.manage.value],
+      groups: {
+        [import_constants.ALL_DEVICES]: [
+          import_constants.uiPermissionsById.read.value,
+          import_constants.uiPermissionsById.manage.value,
+          import_constants.uiPermissionsById.deploy.value,
+          import_constants.uiPermissionsById.connect.value,
+          import_constants.uiPermissionsById.configure.value
+        ]
+      },
+      releases: {
+        [import_constants.ALL_RELEASES]: [import_constants.uiPermissionsById.manage.value, import_constants.uiPermissionsById.upload.value, import_constants.uiPermissionsById.read.value]
+      },
+      tenantManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value],
+      userManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value]
+    }
+  }
+};
+var defaultRolesById = {
+  ...import_constants.rolesById,
+  test: {
+    ...import_constants.emptyRole,
+    name: "test",
+    description: "test description",
+    editable: true,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      groups: { testGroup: [import_constants.uiPermissionsById.read.value] },
+      releases: { bar: [import_constants.uiPermissionsById.read.value] }
+    }
+  }
+};
+var receivedRoles = rbacRoles.reduce(
+  (accu, role) => {
+    const { name, description, ...roleRemainder } = role;
+    if (name.startsWith("RBAC")) {
+      accu[name] = {
+        ...defaultRolesById[name],
+        ...roleRemainder,
+        editable: false,
+        isCustom: false,
+        description: defaultRolesById[name].description ? defaultRolesById[name].description : description
+      };
+    } else {
+      const result = expectedParsedRoles[name] ?? {};
+      accu[name] = {
+        ...import_constants.emptyRole,
+        ...role,
+        ...result,
+        name
+      };
+    }
+    return accu;
+  },
+  { ...defaultRolesById }
+);
+var receivedPermissionSets = permissionSets.reduce((accu, set) => {
+  const result = import_constants.defaultPermissionSets[set.name]?.result ?? {};
+  accu[set.name] = {
+    ...set,
+    result: {
+      ...import_constants.emptyUiPermissions,
+      ...result
+    }
+  };
+  return accu;
+}, {});
+
+// src/requestHandlers/organizationHandlers.ts
+var PLANS = {
+  os: { id: "os", name: "Basic" },
+  professional: { id: "professional", name: "Professional" },
+  enterprise: { id: "enterprise", name: "Enterprise" }
+};
+var releasesSample = {
+  lts: ["3.3"],
+  releases: {
+    "3.2": {
+      "3.2.1": {
+        release_date: "2022-02-02",
+        release: "3.2.1",
+        repos: [
+          { name: "integration", version: "1.2.3" },
+          { name: "mender", version: "3.2.1" },
+          { name: "mender-artifact", version: "1.3.7" },
+          { name: "service", version: "3.0.0" },
+          { name: "other-service", version: "1.1.0" }
+        ]
+      },
+      "3.2.0": {
+        release_date: "2022-01-24",
+        release: "3.2.0",
+        repos: [
+          { name: "service", version: "3.0.0" },
+          { name: "another-service", version: "4.1.0" }
+        ]
+      }
+    },
+    "2.7": {
+      "2.7.2": {
+        release_date: "2021-11-04",
+        release: "2.7.2",
+        repos: [
+          { name: "service", version: "1.1.0" },
+          { name: "more-service", version: "1.0.2" }
+        ]
+      }
+    },
+    "1.0": {
+      supported_until: "2018-02",
+      "1.0.1": {
+        release_date: "2017-04-03",
+        release: "1.0.1",
+        repos: [{ name: "service", version: "1.0.1" }]
+      },
+      "1.0.0": {
+        release_date: "2017-02-16",
+        release: "1.0.0",
+        repos: [{ name: "mono-service", version: "1.0.0" }]
+      }
+    }
+  },
+  saas: [
+    { tag: "saas-v2022.03.10", date: "2022-03-09" },
+    { tag: "saas-v2020.09.25", date: "2020-09-24" },
+    { tag: "saas-v2020.07.09", date: "2020-07-09" }
+  ]
+};
+var tagsSample = [{ name: "saas-v2023.05.02", more: "here" }];
+var signupHandler = async ({ request }) => {
+  const signup = await request.json();
+  if (["email", "organization", "plan", "tos"].every((item) => !!signup[item])) {
+    return import_msw.HttpResponse.text("test");
+  }
+  return new import_msw.HttpResponse(null, { status: 400 });
+};
+var organizationHandlers = [
+  import_msw.http.get("/tags.json", () => import_msw.HttpResponse.json(tagsSample)),
+  import_msw.http.get("/versions.json", () => import_msw.HttpResponse.json(releasesSample)),
+  import_msw.http.get(`${import_constants2.tenantadmApiUrlv1}/user/tenant`, () => import_msw.HttpResponse.json(mockApiResponses.organization.organization)),
+  import_msw.http.put(`${import_constants2.tenantadmApiUrlv2}/tenants/:tenantId/child`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/tenants/:tenantId/cancel`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/tenants/trial`, signupHandler),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/tenants`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.post(`https://hosted.mender.io${import_constants2.tenantadmApiUrlv2}/tenants/trial`, signupHandler),
+  import_msw.http.get(`${import_constants2.tenantadmApiUrlv2}/tenants`, () => new import_msw.HttpResponse([])),
+  import_msw.http.get(`${import_constants2.tenantadmApiUrlv2}/billing`, () => import_msw.HttpResponse.json({ card: { last4: "7890", exp_month: 1, exp_year: 2024, brand: "testCorp" } })),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/billing/card`, () => import_msw.HttpResponse.json({ intent_id: mockApiResponses.organization.intentId, secret: "testSecret" })),
+  import_msw.http.post(
+    `${import_constants2.tenantadmApiUrlv2}/billing/card/:intentId/confirm`,
+    ({ params: { intentId } }) => new import_msw.HttpResponse(null, { status: intentId == mockApiResponses.organization.intentId ? 200 : 540 })
+  ),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/tenants/:tenantId/upgrade/:status`, async ({ params: { status, tenantId }, request }) => {
+    if (tenantId != mockApiResponses.organization.organization.id || !["cancel", "complete", "start"].includes(status)) {
+      return new import_msw.HttpResponse(null, { status: 541 });
+    }
+    if (status === "start") {
+      return import_msw.HttpResponse.json({ secret: "testSecret" });
+    }
+    let plan;
+    try {
+      const body = await request.json();
+      plan = body.plan;
+    } catch {
+    }
+    if (plan && !Object.keys(PLANS).includes(plan)) {
+      return new import_msw.HttpResponse(null, { status: 542 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/tenants/:tenantId/plan`, async ({ params: { tenantId }, request }) => {
+    const body = await request.json();
+    const expectedKeys = ["current_plan", "requested_plan", "current_addons", "requested_addons", "user_message"];
+    if (tenantId != mockApiResponses.organization.organization.id || !Object.keys(body).every((key) => expectedKeys.includes(key))) {
+      return new import_msw.HttpResponse(null, { status: 544 });
+    }
+    if (body.requested_plan && !Object.values(PLANS).some((item) => item.name === body.requested_plan)) {
+      return new import_msw.HttpResponse(null, { status: 545 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.post(`${import_constants2.tenantadmApiUrlv2}/contact/support`, async ({ request }) => {
+    const { subject, body } = await request.json();
+    if (!(subject && body)) {
+      return new import_msw.HttpResponse(null, { status: 543 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.get(`${import_constants2.auditLogsApiUrl}/logs`, ({ request }) => {
+    const { searchParams } = new URL(request.url);
+    const perPage = Number(searchParams.get("per_page"));
+    if (perPage === 500) {
+      return import_msw.HttpResponse.json([
+        { meta: mockApiResponses.organization.auditlog.events[2].meta, time: mockApiResponses.organization.auditlog.events[1].time, action: "close_terminal" }
+      ]);
+    }
+    return new import_msw.HttpResponse(JSON.stringify(mockApiResponses.organization.auditlog.events), {
+      headers: { [import_constants2.headerNames.total]: mockApiResponses.organization.auditlog.events.length }
+    });
+  }),
+  import_msw.http.get(
+    `${import_constants2.auditLogsApiUrl}/logs/export`,
+    () => import_msw.HttpResponse.text(`action,actor.id,actor.type,actor.email,actor.identity_data,object.id,object.type,object.user.email,object.deployment.name,object.deployment.artifact_name,change
+    update,5c56c2ed-2a9a-5de9-bb86-cf38b3d4a5e1,user,test@example.coim,,067f23a9-76a5-5585-b119-32402a120978,user,test@example.com,,,"Update user 067f23a9-76a5-5585-b119-32402a120978 (test@example.com).
+    Diff:
+    --- Original
+    +++ Current
+    @@ -9 +9,2 @@
+    -    ""RBAC_ROLE_OBSERVER""
+    +    ""RBAC_ROLE_OBSERVER"",
+    +    ""RBAC_ROLE_PERMIT_ALL""
+    "
+    `)
+  ),
+  import_msw.http.get(
+    `${import_constants2.iotManagerBaseURL}/integrations`,
+    () => import_msw.HttpResponse.json([
+      { connection_string: "something_else", id: 1, provider: "iot-hub" },
+      { id: 2, provider: "iot-core", something: "new" }
+    ])
+  ),
+  import_msw.http.post(`${import_constants2.iotManagerBaseURL}/integrations`, () => import_msw.HttpResponse.json([{ connection_string: "something_else", provider: "iot-hub" }])),
+  import_msw.http.put(`${import_constants2.iotManagerBaseURL}/integrations/:integrationId`, ({ params: { integrationId } }) => {
+    if (!integrationId) {
+      return new import_msw.HttpResponse(null, { status: 547 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.put(`${import_constants2.iotManagerBaseURL}/integrations/:integrationId/credentials`, ({ params: { integrationId } }) => {
+    if (!integrationId) {
+      return new import_msw.HttpResponse(null, { status: 548 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.delete(`${import_constants2.iotManagerBaseURL}/integrations/:integrationId`, ({ params: { integrationId } }) => {
+    if (!integrationId) {
+      return new import_msw.HttpResponse(null, { status: 549 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.get(`${import_constants2.iotManagerBaseURL}/events`, ({ request }) => {
+    const { searchParams } = new URL(request.url);
+    const page = Number(searchParams.get("page"));
+    const perPage = Number(searchParams.get("per_page"));
+    return import_msw.HttpResponse.json(webhookEvents.slice(page - 1, page * perPage));
+  }),
+  import_msw.http.get(
+    import_constants2.ssoIdpApiUrlv1,
+    () => import_msw.HttpResponse.json([
+      { id: "1", issuer: "https://samltest.id/saml/idp", valid_until: "2038-08-24T21:14:09Z" },
+      { id: "2", issuer: "https://samltest2.id/saml/idp", valid_until: "2030-10-24T21:14:09Z" }
+    ])
+  ),
+  import_msw.http.post(import_constants2.ssoIdpApiUrlv1, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.get(`${import_constants2.ssoIdpApiUrlv1}/:configId`, ({ params: { configId } }) => {
+    if (!configId) {
+      return new import_msw.HttpResponse(null, { status: 550 });
+    }
+    return import_msw.HttpResponse.json({ email: "user@acme.com", password: "mypass1234", login: { google: "bob@gmail.com" }, config: "<div>not quite right</div>" });
+  }),
+  import_msw.http.put(`${import_constants2.ssoIdpApiUrlv1}/:configId`, ({ params: { configId } }) => new import_msw.HttpResponse(null, { status: configId ? 200 : 551 })),
+  import_msw.http.delete(`${import_constants2.ssoIdpApiUrlv1}/:configId`, ({ params: { configId } }) => new import_msw.HttpResponse(null, { status: configId ? 200 : 552 }))
+];
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  organizationHandlers
+});
+//# sourceMappingURL=organizationHandlers.cjs.map