@northern.tech/testing 0.1.0

package/dist/requestHandlers/userHandlers.cjs

@@ -0,0 +1,925 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/requestHandlers/userHandlers.ts
+var userHandlers_exports = {};
+__export(userHandlers_exports, {
+  userHandlers: () => userHandlers
+});
+module.exports = __toCommonJS(userHandlers_exports);
+var import_constants2 = require("@northern.tech/utils/constants");
+var import_msw = require("msw");
+
+// src/mockData.ts
+var import_constants = require("@northern.tech/utils/constants");
+var TEST_SESSION_DATETIME = "2019-01-13T13:00:00.000Z";
+var testDate = new Date(TEST_SESSION_DATETIME);
+var mockDate = new Date(testDate.setMilliseconds(testDate.getMilliseconds() + import_constants.maxSessionAge));
+var defaultPassword = "mysecretpassword!123";
+var defaultCreationDate = "2019-01-13T06:25:00.000Z";
+var defaultMacAddress = "dc:a6:32:12:ad:bf";
+var testSsoId = "sso_id";
+var permissionSetObjectTypes = {
+  any: "Any",
+  artifacts: "Artifacts",
+  empty: "",
+  groups: "Device groups",
+  releases: "Releases",
+  tenantManagement: "Tenant management",
+  userManagement: "User management"
+};
+var commonEndpoints = {
+  artifacts: "^/api/management/v1/deployments/artifacts",
+  artifactDetails: "^/api/management/v1/deployments/artifacts/[^/]+",
+  deviceManagement: "^/api/management/(v[1-9])/(devauth|inventory)/"
+};
+var token = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJjZTNkMGY4Yy1hZWRlLTQwMzAtYjM5MS03ZDUwMjBlYjg3M2UiLCJzdWIiOiJhMzBhNzgwYi1iODQzLTUzNDQtODBlMy0wZmQ5NWE0ZjZmYzMiLCJleHAiOjE2MDY4MTUzNjksImlhdCI6MTYwNjIxMDU2OSwibWVuZGVyLnRlbmFudCI6IjVmODVjMTdiY2U2MmI3ZmE3ZjVmNzA0MCIsIm1lbmRlci51c2VyIjp0cnVlLCJpc3MiOiJNZW5kZXIgVXNlcnMiLCJzY3AiOiJtZW5kZXIuKiIsIm1lbmRlci5wbGFuIjoicHJvZmVzc2lvbmFsIiwibmJmIjoxNjA2MjEwNTY5fQ.qVgYdCzLTf8OdK9uUctqqaY_HWkIiwpekuGvuGQAXCEgOv4bRNDlZRN_ZRSbxQoARG3pquhScbQrjBV9tcF4irTUPlTn3yrsXNO17DpcbTVeKRkb88RDtIKiRw3orVZ_GlIb-ckTQ5dS-Nqlyyf3Fmrhca-gwt6m_xv2UrmJK6eYYTMfggdRRWb-4u7mEkBI_pHPMTQrT8kJ2BeX-vHgazH9AoH0k85LHtFZQXD7pXHlDZRnLxJXukncwMGDmF17374gavYAIyDIzcC8sEBMDnVXgpikeA1sauzirqix6mAVs6XmxdQO7aF0wfXO1_PTYUA3Nk1oQfMYNlEI3U9uLRJRZIq2L8fmrrBryhstKd4y0KlBbGAQrx8NtRkgajjd1ljMfPBUEZrb7uSerVjneiO-aIBO76CuH0zdklphIjpGJeogkBhe8pAYNggp1XsZHgpZfl7IE5faKaDkMGnutaea--Czor6bhqUNCuY4tR0cpQJbNwy6LS9o1CFy4Log";
+var accessTokens = [
+  { id: "some-id-1", expiration_date: "2022-06-02T11:11:21.725Z", name: "some-name-1" },
+  { id: "some-id-2", expiration_date: "2022-06-02T11:11:21.725Z", last_used: "2022-06-02T11:05:21.725Z", name: "some-name-2" }
+];
+var userId = "a30a780b-b843-5344-80e3-0fd95a4f6fc3";
+var defaultUser = {
+  created_ts: "2019-01-01T10:30:00.000Z",
+  email: "a@b.com",
+  id: "a1",
+  roles: ["RBAC_ROLE_PERMIT_ALL"],
+  tfa_status: "enabled",
+  verified: true
+};
+var deviceTypes = { qemu: "qemux86-64" };
+var checkInTimeRounded = "2019-01-01T00:00:00.000Z";
+var checkInTimeExact = "2019-01-01T10:25:00.000Z";
+var mockApiResponses = {
+  deployments: {
+    byId: {
+      d1: {
+        id: "d1",
+        name: "test deployment",
+        created: "2019-01-01T12:30:00.000Z",
+        devices: {
+          a1: {
+            id: "a1",
+            status: "installing",
+            attributes: {},
+            image: { size: 123 }
+          }
+        },
+        statistics: {
+          status: {
+            "already-installed": 0,
+            decommissioned: 0,
+            downloading: 0,
+            failure: 0,
+            installing: 1,
+            noartifact: 0,
+            pending: 0,
+            rebooting: 0,
+            success: 0
+          },
+          total_size: 1234
+        }
+      },
+      d2: {
+        id: "d2",
+        name: "test deployment 2",
+        artifact_name: "r1",
+        artifacts: ["123"],
+        created: "2019-01-01T12:25:00.000Z",
+        device_count: 1,
+        devices: {
+          b1: {
+            attributes: {},
+            id: "b1",
+            status: "pending"
+          }
+        },
+        filter: void 0,
+        group: void 0,
+        statistics: {
+          status: {
+            downloading: 0,
+            decommissioned: 0,
+            failure: 0,
+            installing: 0,
+            noartifact: 0,
+            pending: 1,
+            rebooting: 0,
+            success: 0,
+            "already-installed": 0
+          }
+        }
+      },
+      d3: {
+        id: "d3",
+        name: "Test",
+        phases: [
+          { id: "0", batch_size: 2, device_count: 2 },
+          { id: "1", start_ts: "2019-02-04T11:45:10.002Z", batch_size: 3, device_count: 3 },
+          { id: "2", start_ts: "2019-02-05T11:45:10.002Z", batch_size: 5, device_count: 5 },
+          { id: "3", start_ts: "2019-02-06T11:45:10.002Z", batch_size: 5, device_count: 5 },
+          { id: "4", start_ts: "2019-02-21T11:45:10.002Z", batch_size: 5, device_count: 0 }
+        ],
+        max_devices: 0,
+        created: "2019-01-31T12:59:30.020Z",
+        devices: {},
+        filter: void 0,
+        group: void 0,
+        stats: {
+          pending: 3,
+          decommissioned: 0,
+          failure: 23,
+          pause_before_committing: 0,
+          pause_before_rebooting: 0,
+          installing: 0,
+          rebooting: 0,
+          "already-installed": 0,
+          pause_before_installing: 0,
+          downloading: 0,
+          success: 6,
+          aborted: 0,
+          noartifact: 0
+        },
+        statistics: { total_size: "1234" },
+        status: "inprogress",
+        active: true,
+        device_count: 100,
+        retries: "0",
+        type: "software"
+      }
+    },
+    byStatus: {
+      pending: { deploymentIds: ["d2"] },
+      inprogress: { deploymentIds: ["d3"] }
+    }
+  },
+  devices: {
+    byId: {
+      a1: {
+        id: "a1",
+        auth_sets: [
+          {
+            id: "auth1",
+            identity_data: { mac: defaultMacAddress },
+            pubkey: "-----BEGIN PUBLIC KEY-----\nMIIBojWELzgJ62hcXIhAfqfoNiaB1326XZByZwcnHr5BuSPAgMBAAE=\n-----END PUBLIC KEY-----\n",
+            status: "accepted",
+            ts: defaultCreationDate
+          }
+        ],
+        updated_ts: "2019-01-01T09:25:00.000Z"
+      },
+      b1: {
+        id: "b1",
+        attributes: {
+          ipv4_wlan0: "192.168.10.141/24",
+          device_type: [deviceTypes.qemu]
+        },
+        system: {
+          check_in_time: checkInTimeRounded
+        },
+        check_in_time: checkInTimeExact,
+        check_in_time_exact: checkInTimeExact,
+        check_in_time_rounded: checkInTimeRounded,
+        identity_data: { mac: defaultMacAddress },
+        status: "accepted",
+        decommissioning: false,
+        created_ts: defaultCreationDate,
+        updated_ts: "2019-01-01T09:25:00.000Z",
+        auth_sets: [
+          {
+            id: "auth1",
+            identity_data: { mac: defaultMacAddress },
+            pubkey: "-----BEGIN PUBLIC KEY-----\nMIIBojWELzgJ62hcXIhAfqfoNiaB1326XZByZwcnHr5BuSPAgMBAAE=\n-----END PUBLIC KEY-----\n",
+            ts: defaultCreationDate,
+            status: "accepted"
+          }
+        ]
+      }
+    },
+    groups: {
+      byId: {
+        testGroup: {
+          deviceIds: ["a1", "b1"],
+          filters: [],
+          total: 2
+        },
+        testGroupDynamic: {
+          id: "filter1",
+          name: "filter1",
+          filters: [{ scope: "system", key: "group", operator: "$eq", value: "things" }]
+        }
+      }
+    },
+    limit: 500,
+    byStatus: {
+      accepted: { deviceIds: ["a1", "b1"], total: 2 },
+      active: { deviceIds: [], total: 0 },
+      inactive: { deviceIds: [], total: 0 },
+      pending: { deviceIds: ["c1"], total: 1 },
+      preauthorized: { deviceIds: [], total: 0 },
+      rejected: { deviceIds: [], total: 0 }
+    }
+  },
+  organization: {
+    organization: {
+      id: "1",
+      addons: [],
+      name: "test",
+      plan: "os",
+      trial: false
+    },
+    intentId: "testIntent",
+    auditlog: {
+      events: [
+        {
+          actor: {
+            id: "string",
+            type: "user",
+            email: "string@example.com"
+          },
+          time: "2019-01-01T12:10:22.667Z",
+          action: "create",
+          object: {
+            id: "string",
+            type: "user",
+            user: {
+              email: "user@acme.com"
+            }
+          },
+          change: "change1"
+        },
+        {
+          actor: {
+            id: "string",
+            type: "user",
+            email: "string",
+            identity_data: "string"
+          },
+          time: "2019-01-01T12:16:22.667Z",
+          action: "create",
+          object: {
+            id: "string",
+            type: "deployment",
+            deployment: {
+              name: "production",
+              artifact_name: "Application 0.0.1"
+            }
+          },
+          change: "change2"
+        },
+        {
+          actor: {
+            id: "string",
+            type: "user",
+            email: "string@example.com"
+          },
+          time: "2019-01-01T12:10:22.669Z",
+          action: "open_terminal",
+          meta: {
+            session_id: ["abd313a8-ee88-48ab-9c99-fbcd80048e6e"]
+          },
+          object: {
+            id: "a1",
+            type: "device"
+          },
+          change: "change3"
+        }
+      ]
+    }
+  },
+  releases: {
+    byId: {
+      r1: {
+        name: "r1",
+        artifacts: [
+          {
+            id: "art1",
+            description: "test description",
+            device_types_compatible: [deviceTypes.qemu],
+            modified: "2020-09-10T12:16:22.667Z",
+            updates: [{ type_info: "testtype" }],
+            artifact_depends: {
+              device_type: [deviceTypes.qemu]
+            },
+            artifact_provides: {
+              artifact_name: "myapp",
+              "data-partition.myapp.version": "v2020.10",
+              list_of_fancy: [deviceTypes.qemu, "x172"]
+            },
+            clears_artifact_provides: ["data-partition.myapp.*"]
+          }
+        ],
+        device_types_compatible: [deviceTypes.qemu],
+        modified: "2020-09-10T12:16:22.667Z",
+        metaData: {}
+      }
+    }
+  },
+  users: {
+    byId: {
+      a1: defaultUser,
+      [userId]: { ...defaultUser, id: userId, email: "a2@b.com", created_ts: "2019-01-01T12:30:00.000Z" }
+    },
+    rolesById: {
+      admin: {
+        name: "admin",
+        description: "Administrator role",
+        permissions: []
+      },
+      test: { name: "test", description: "test description", permissions: [] }
+    },
+    globalSettings: {
+      "2fa": "enabled",
+      id_attribute: void 0,
+      previousFilters: []
+    },
+    userSettings: {
+      "2fa": "disabled",
+      columnSelection: [],
+      onboarding: { something: "here" },
+      tooltips: {},
+      previousFilters: []
+    }
+  }
+};
+var releasesList = Array.from({ length: 5e3 }, (x, i) => ({
+  artifacts: [
+    {
+      id: "art1",
+      description: "test description",
+      device_types_compatible: [deviceTypes.qemu],
+      modified: "2020-09-10T12:16:22.667Z",
+      updates: [{ type_info: "testtype" }],
+      artifact_depends: {
+        device_type: [deviceTypes.qemu]
+      },
+      artifact_provides: {
+        artifact_name: "myapp",
+        "data-partition.myapp.version": "v2020.10",
+        list_of_fancy: [deviceTypes.qemu, "x172"]
+      },
+      clears_artifact_provides: ["data-partition.myapp.*"]
+    }
+  ],
+  device_types_compatible: [deviceTypes.qemu],
+  metaData: {},
+  name: `release-${i + 1}`,
+  modified: i
+}));
+var permissionSets = [
+  {
+    ...import_constants.defaultPermissionSets.Basic,
+    object: permissionSetObjectTypes.empty,
+    description: "Set containing basic permissions.",
+    permissions: [
+      { action: "http", object: { type: "any", value: "^/api/management/v1/useradm/settings$" } },
+      { action: "http", object: { type: "any", value: "^/api/management/v1/useradm/users/me$" } },
+      { action: "http", object: { type: "any", value: "^/api/management/1.0/auth/verify$" } },
+      { action: "http", object: { type: "PUT", value: "^/api/management/v1/useradm/2faverify$" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/v1/useradm/users/me/2fa/(enable|disable)$" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/useradm/roles" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/tenantadm/user/tenant" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageReleases,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.releases,
+    description: "Set of permissions which allows user to manage releases",
+    permissions: [
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifacts } },
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "PUT", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "DELETE", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "GET", value: "^/api/management/v1/deployments/artifacts/[^/]+/download" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadUsers,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.userManagement,
+    description: "Set of permissions which allows user to view other users",
+    permissions: [{ action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/useradm/" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageUsers,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.userManagement,
+    description: "Set of permissions which allows user manage other user accounts",
+    permissions: [{ action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/useradm/" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadTenants,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.tenantManagement,
+    description: "Set of permissions which allows user to list other tenants and their config",
+    permissions: [
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/tenantadm/" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/(v[1-9])/tenantadm/" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageTenants,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.tenantManagement,
+    description: "Set of permissions which allows user to manage other tenants and their config",
+    permissions: [
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/tenantadm/" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/(v[1-9])/tenantadm/" } },
+      { action: "http", object: { type: "PUT", value: "^/api/management/(v[1-9])/tenantadm/" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadAuditLogs,
+    action: import_constants.uiPermissionsById.read.title,
+    object: "System Audit Log",
+    description: "Set of permissions which allows user to view system audit log",
+    permissions: [{ action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/auditlogs/logs" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.DeployToDevices,
+    action: "Deploy",
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to deploy to devices",
+    permissions: [{ action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/(deployments|deviceconfig)/" } }],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ConfigureDevices,
+    action: "Configure",
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to manage configuration of the devices",
+    permissions: [{ action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconfig/" } }],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ConnectToDevices,
+    action: "Connect",
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to use remote terminal and file transfer",
+    permissions: [
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+/connect$" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+/download\\?path=[^&]+$" } },
+      { action: "http", object: { type: "PUT", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+/upload$" } }
+    ],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.SuperUser,
+    action: "Any",
+    object: permissionSetObjectTypes.any,
+    description: "Set of permissions which allows user to do anything",
+    permissions: [{ action: "any", object: { type: "any", value: "any" } }]
+  },
+  {
+    ...import_constants.defaultPermissionSets.UploadArtifacts,
+    action: "Upload",
+    object: permissionSetObjectTypes.artifacts,
+    description: "Set of permissions which allows user to upload artifacts",
+    permissions: [
+      { action: "http", object: { type: "POST", value: commonEndpoints.artifacts } },
+      { action: "http", object: { type: "POST", value: "^/api/management/v1/deployments/artifacts/generate" } }
+    ]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadDevices,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to view devices",
+    permissions: [
+      { action: "http", object: { type: "POST", value: "^/api/management/v2/inventory/filters/search" } },
+      { action: "http", object: { type: "POST", value: "^/api/management/v1/reporting/devices/search" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9])/(deployments|devauth|inventory|deviceconfig|devicemonitor)/" } },
+      { action: "http", object: { type: "GET", value: "^/api/management/(v[1-9]|0.1.0)/deviceconnect/devices/[^/]+$" } }
+    ],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ManageDevices,
+    action: import_constants.uiPermissionsById.manage.title,
+    object: permissionSetObjectTypes.groups,
+    description: "Set of permissions which allows user to manage devices",
+    permissions: [
+      { action: "http", object: { type: "POST", value: commonEndpoints.deviceManagement } },
+      { action: "http", object: { type: "PUT", value: commonEndpoints.deviceManagement } },
+      { action: "http", object: { type: "DELETE", value: commonEndpoints.deviceManagement } }
+    ],
+    supported_scope_types: [import_constants.scopedPermissionAreas.groups.scopeType]
+  },
+  {
+    ...import_constants.defaultPermissionSets.ReadReleases,
+    action: import_constants.uiPermissionsById.read.title,
+    object: permissionSetObjectTypes.releases,
+    description: "Set of permissions which allows user to view releases",
+    permissions: [
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifacts } },
+      { action: "http", object: { type: "GET", value: commonEndpoints.artifactDetails } },
+      { action: "http", object: { type: "GET", value: "^/api/management/v1/deployments/artifacts/[^/]+/download" } }
+    ]
+  },
+  {
+    name: "almostAdmin",
+    object: permissionSetObjectTypes.empty,
+    description: "Set containing all the permissions.",
+    permissions: [
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/auditlogs/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/config/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/deployments/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deployments/deployments/releases/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/devauth/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconfig/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconnect/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/deviceconnect/devices" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/inventory/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/iot-manager/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/monitor/.*" } },
+      { action: "http", object: { type: "any", value: "^/api/management/(v[1-9])/useradm/.*" } }
+    ]
+  }
+];
+var rbacRoles = [
+  {
+    name: "dyn",
+    description: "",
+    permissions: [
+      { action: "CREATE_DEPLOYMENT", object: { type: "DEVICE_GROUP", value: "dyn" } },
+      { action: "VIEW_DEVICE", object: { type: "DEVICE_GROUP", value: "dyn" } }
+    ]
+  },
+  { name: "asdasd", description: "123", permissions: [{ action: "http", object: { type: "any", value: "/api/management/v1/useradm/.*" } }] },
+  {
+    name: "141sasd",
+    description: "1313adg",
+    permission_sets_with_scope: [
+      { ...import_constants.defaultPermissionSets.ReadDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["bestgroup"] } },
+      { ...import_constants.defaultPermissionSets.ConnectToDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["bestgroup"] } },
+      { ...import_constants.defaultPermissionSets.ManageUsers }
+    ]
+  },
+  {
+    name: "kljlkk",
+    description: "lkl",
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.ConnectToDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["bestgroup"] } }]
+  },
+  {
+    name: "yyyyy",
+    description: "asd",
+    permission_sets_with_scope: [
+      { ...import_constants.defaultPermissionSets.ManageDevices, scope: { type: import_constants.scopedPermissionAreas.groups.scopeType, value: ["dockerclient"] } },
+      { ...import_constants.defaultPermissionSets.ManageReleases }
+    ]
+  },
+  {
+    name: "RBAC_ROLE_DEPLOYMENTS_MANAGER",
+    description: "Intended for users responsible for managing deployments, this role can create and abort deployments",
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.DeployToDevices }]
+  },
+  {
+    name: "RBAC_ROLE_REMOTE_TERMINAL",
+    description: `Intended for tech support accounts, this role can access the devices' Remote Terminal.`,
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.ConnectToDevices }]
+  },
+  { name: "RBAC_ROLE_PERMIT_ALL", description: "", permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.SuperUser }] },
+  {
+    name: "RBAC_ROLE_OBSERVER",
+    description: "Intended for team leaders or limited tech support accounts, this role can see all Devices, Artifacts and Deployment reports but not make any changes.",
+    permission_sets_with_scope: [{ ...import_constants.defaultPermissionSets.ReadReleases }, { ...import_constants.defaultPermissionSets.ReadDevices }]
+  },
+  {
+    name: "RBAC_ROLE_CI",
+    description: "Intended for automation accounts building software (e.g. CI/CD systems), this role can only manage Artifacts, including upload new Artifacts and delete Artifacts. It does not have access to Devices or Deployments.",
+    permission_sets_with_scope: [
+      { ...import_constants.defaultPermissionSets.ReadReleases },
+      { ...import_constants.defaultPermissionSets.ManageReleases },
+      { ...import_constants.defaultPermissionSets.UploadArtifacts }
+    ]
+  },
+  {
+    name: "almostAdmin",
+    description: "almost admin rights",
+    permissions: permissionSets.find((item) => item.name === "almostAdmin")?.permissions
+  },
+  {
+    name: "almostAdminNew",
+    description: "almost admin rights",
+    permission_sets_with_scope: Object.values(import_constants.defaultPermissionSets)
+  }
+];
+var expectedParsedRoles = {
+  "141sasd": {
+    editable: true,
+    isCustom: void 0,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      groups: { bestgroup: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.connect.value] },
+      userManagement: [import_constants.uiPermissionsById.manage.value]
+    }
+  },
+  asdasd: {
+    editable: false,
+    isCustom: true,
+    uiPermissions: { ...import_constants.emptyUiPermissions, userManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value] }
+  },
+  dyn: {
+    editable: false,
+    isCustom: true,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      deployments: [import_constants.uiPermissionsById.deploy.value],
+      groups: { dyn: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.deploy.value] }
+    }
+  },
+  kljlkk: {
+    editable: true,
+    isCustom: false,
+    uiPermissions: { ...import_constants.emptyUiPermissions, groups: { bestgroup: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.connect.value] } }
+  },
+  yyyyy: {
+    editable: true,
+    isCustom: void 0,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      groups: { dockerclient: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value] },
+      releases: { [import_constants.ALL_RELEASES]: [import_constants.uiPermissionsById.manage.value] }
+    }
+  },
+  almostAdmin: {
+    editable: false,
+    isCustom: true,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      auditlog: [import_constants.uiPermissionsById.read.value],
+      deployments: [import_constants.uiPermissionsById.manage.value, import_constants.uiPermissionsById.deploy.value, import_constants.uiPermissionsById.read.value],
+      groups: {
+        [import_constants.ALL_DEVICES]: [
+          import_constants.uiPermissionsById.read.value,
+          // we can't assign deployment permissions to devices here, since the old path based rbac controls don't allow the scoped permissions
+          // uiPermissionsById.deploy.value,
+          import_constants.uiPermissionsById.manage.value,
+          import_constants.uiPermissionsById.connect.value,
+          import_constants.uiPermissionsById.configure.value
+        ]
+      },
+      releases: {
+        [import_constants.ALL_RELEASES]: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.upload.value, import_constants.uiPermissionsById.manage.value]
+      },
+      userManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value]
+    }
+  },
+  almostAdminNew: {
+    editable: true,
+    isCustom: void 0,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      auditlog: [import_constants.uiPermissionsById.read.value],
+      deployments: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.deploy.value, import_constants.uiPermissionsById.manage.value],
+      groups: {
+        [import_constants.ALL_DEVICES]: [
+          import_constants.uiPermissionsById.read.value,
+          import_constants.uiPermissionsById.manage.value,
+          import_constants.uiPermissionsById.deploy.value,
+          import_constants.uiPermissionsById.connect.value,
+          import_constants.uiPermissionsById.configure.value
+        ]
+      },
+      releases: {
+        [import_constants.ALL_RELEASES]: [import_constants.uiPermissionsById.manage.value, import_constants.uiPermissionsById.upload.value, import_constants.uiPermissionsById.read.value]
+      },
+      tenantManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value],
+      userManagement: [import_constants.uiPermissionsById.read.value, import_constants.uiPermissionsById.manage.value]
+    }
+  }
+};
+var defaultRolesById = {
+  ...import_constants.rolesById,
+  test: {
+    ...import_constants.emptyRole,
+    name: "test",
+    description: "test description",
+    editable: true,
+    uiPermissions: {
+      ...import_constants.emptyUiPermissions,
+      groups: { testGroup: [import_constants.uiPermissionsById.read.value] },
+      releases: { bar: [import_constants.uiPermissionsById.read.value] }
+    }
+  }
+};
+var receivedRoles = rbacRoles.reduce(
+  (accu, role) => {
+    const { name, description, ...roleRemainder } = role;
+    if (name.startsWith("RBAC")) {
+      accu[name] = {
+        ...defaultRolesById[name],
+        ...roleRemainder,
+        editable: false,
+        isCustom: false,
+        description: defaultRolesById[name].description ? defaultRolesById[name].description : description
+      };
+    } else {
+      const result = expectedParsedRoles[name] ?? {};
+      accu[name] = {
+        ...import_constants.emptyRole,
+        ...role,
+        ...result,
+        name
+      };
+    }
+    return accu;
+  },
+  { ...defaultRolesById }
+);
+var receivedPermissionSets = permissionSets.reduce((accu, set) => {
+  const result = import_constants.defaultPermissionSets[set.name]?.result ?? {};
+  accu[set.name] = {
+    ...set,
+    result: {
+      ...import_constants.emptyUiPermissions,
+      ...result
+    }
+  };
+  return accu;
+}, {});
+
+// src/requestHandlers/userHandlers.ts
+var userHandlers = [
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/auth/login`, ({ request }) => {
+    const authHeader = request.headers.get("authorization");
+    const authInfo = atob(authHeader?.split(" ")[1]);
+    const [user, password] = authInfo.split(":");
+    if (!password) {
+      return import_msw.HttpResponse.json({ id: testSsoId, kind: "sso/saml" });
+    } else if (password !== defaultPassword) {
+      return new import_msw.HttpResponse(null, { status: 401 });
+    } else if (user.includes("limited")) {
+      return new import_msw.HttpResponse("limitedToken", { headers: { "Content-Type": import_constants2.APPLICATION_JWT_CONTENT_TYPE } });
+    } else if (user.includes("2fa")) {
+      return new import_msw.HttpResponse(JSON.stringify({ error: "2fa needed" }), { status: 401 });
+    }
+    return new import_msw.HttpResponse(token, { headers: { "Content-Type": import_constants2.APPLICATION_JWT_CONTENT_TYPE } });
+  }),
+  import_msw.http.get(`https://hosted.mender.io${import_constants2.useradmApiUrl}/auth/magic/:id`, ({ params: { id } }) => {
+    if (id) {
+      return new import_msw.HttpResponse("test", { headers: { "Set-Cookie": "JWT=test" } });
+    }
+    return new import_msw.HttpResponse(null, { status: 400 });
+  }),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/auth/logout`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/auth/password-reset/:status`, async ({ params: { status }, request }) => {
+    const { email, secret_hash, password } = await request.json();
+    if (!["start", "complete"].includes(status) && ![email, secret_hash, password].some((item) => item)) {
+      return new import_msw.HttpResponse(null, { status: 560 });
+    }
+    if (status === "start" && email) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    if (status === "complete" && secret_hash && password) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 561 });
+  }),
+  import_msw.http.put(`${import_constants2.useradmApiUrl}/2faverify`, async ({ request }) => {
+    const { token2fa } = await request.json();
+    if (!token2fa) {
+      return new import_msw.HttpResponse(null, { status: 562 });
+    }
+    return new import_msw.HttpResponse(null, { status: 200 });
+  }),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/users`, () => import_msw.HttpResponse.json(Object.values(mockApiResponses.users.byId))),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/users/me`, ({ request }) => {
+    const authHeader = request.headers.get("authorization");
+    if (authHeader?.includes("limited")) {
+      return new import_msw.HttpResponse(JSON.stringify({ error: "forbidden by role-based access control" }), { status: 403 });
+    }
+    return import_msw.HttpResponse.json(mockApiResponses.users.byId[userId]);
+  }),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/users/:userId`, ({ params: { userId: userId2 } }) => {
+    if (userId2 === "me" || mockApiResponses.users.byId[userId2]) {
+      const user = userId2 === "me" ? userId : userId2;
+      return import_msw.HttpResponse.json(mockApiResponses.users.byId[user]);
+    }
+    return new import_msw.HttpResponse(null, { status: 563 });
+  }),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/users`, async ({ request }) => {
+    const { email, password } = await request.json();
+    if (email === "test@test.com" || [email, password].every((value) => value)) {
+      return import_msw.HttpResponse.json(mockApiResponses.users.byId.a1);
+    }
+    return new import_msw.HttpResponse(null, { status: 564 });
+  }),
+  import_msw.http.put(`${import_constants2.useradmApiUrl}/users/:userId`, async ({ params: { userId: userId2 }, request }) => {
+    const { email, password, current_password } = await request.json();
+    if (current_password === "bad_password") {
+      return new import_msw.HttpResponse(null, { status: 401 });
+    }
+    if (mockApiResponses.users.byId[userId2] && [email, password].some((value) => Object.values(mockApiResponses.users.byId[userId2]).includes(value)) || email === "test@test.com") {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 565 });
+  }),
+  import_msw.http.delete(
+    `${import_constants2.useradmApiUrl}/users/:userId`,
+    ({ params: { userId: userId2 } }) => new import_msw.HttpResponse(null, { status: mockApiResponses.users.byId[userId2] ? 200 : 566 })
+  ),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/roles`, () => import_msw.HttpResponse.json(rbacRoles)),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/roles`, async ({ request }) => {
+    const { name, permissions } = await request.json();
+    if ([name, permissions].every((value) => value) && permissions.every((permission) => permission.action && permission.object && permission.object.type && permission.object.value)) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 567 });
+  }),
+  import_msw.http.put(`${import_constants2.useradmApiUrl}/roles/:roleId`, async ({ params: { roleId }, request }) => {
+    const { description, name, permissions } = await request.json();
+    if (mockApiResponses.users.rolesById[roleId] && [description, name, permissions].some((value) => value)) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 568 });
+  }),
+  import_msw.http.delete(
+    `${import_constants2.useradmApiUrl}/roles/:roleId`,
+    ({ params: { roleId } }) => new import_msw.HttpResponse(null, { status: mockApiResponses.users.rolesById[roleId] ? 200 : 569 })
+  ),
+  import_msw.http.get(`${import_constants2.useradmApiUrlv2}/roles`, () => import_msw.HttpResponse.json(rbacRoles)),
+  import_msw.http.get(`${import_constants2.useradmApiUrlv2}/roles/:roleId`, async ({ params: { roleId } }) => {
+    if (mockApiResponses.users.rolesById[roleId]) {
+      return import_msw.HttpResponse.json(mockApiResponses.users.rolesById[roleId]);
+    }
+    return new import_msw.HttpResponse(null, { status: 571 });
+  }),
+  import_msw.http.post(`${import_constants2.useradmApiUrlv2}/roles`, async ({ request }) => {
+    const { name, permission_sets_with_scope } = await request.json();
+    if (!!name && permission_sets_with_scope.every((permission) => permission.name && permissionSets.find((permissionSet) => permissionSet.name === permission.name))) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 572 });
+  }),
+  import_msw.http.put(`${import_constants2.useradmApiUrlv2}/roles/:roleId`, async ({ params: { roleId }, request }) => {
+    const { description, name, permission_sets_with_scope } = await request.json();
+    if (mockApiResponses.users.rolesById[roleId] && [description, name, permission_sets_with_scope].some((value) => value)) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 573 });
+  }),
+  import_msw.http.delete(`${import_constants2.useradmApiUrlv2}/roles/:roleId`, ({ params: { roleId } }) => {
+    if (mockApiResponses.users.rolesById[roleId]) {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 574 });
+  }),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/settings`, () => import_msw.HttpResponse.json(mockApiResponses.users.globalSettings)),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/settings`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/settings/me`, () => import_msw.HttpResponse.json(mockApiResponses.users.userSettings)),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/settings/me`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/settings/tokens`, () => import_msw.HttpResponse.json(accessTokens)),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/settings/tokens`, () => import_msw.HttpResponse.json("aNewToken")),
+  import_msw.http.delete(
+    `${import_constants2.useradmApiUrl}/settings/tokens/:tokenId`,
+    ({ params: { tokenId } }) => new import_msw.HttpResponse(null, { status: tokenId === "some-id-1" ? 200 : 577 })
+  ),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/2faqr`, () => import_msw.HttpResponse.json({ qr: btoa("test") })),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/users/:userId/2fa/enable`, ({ params: { userId: userId2 } }) => {
+    if (mockApiResponses.users.byId[userId2] || userId2 === "me") {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 570 });
+  }),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/users/:userId/2fa/disable`, ({ params: { userId: userId2 } }) => {
+    if (mockApiResponses.users.byId[userId2] || userId2 === "me") {
+      return new import_msw.HttpResponse(null, { status: 200 });
+    }
+    return new import_msw.HttpResponse(null, { status: 571 });
+  }),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/auth/verify-email/start`, () => new import_msw.HttpResponse(null, { status: 200 })),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/auth/verify-email/complete`, async ({ request }) => {
+    const { secret_hash } = await request.json();
+    return new import_msw.HttpResponse(null, { status: secret_hash === "superSecret" ? 200 : 576 });
+  }),
+  import_msw.http.get(`${import_constants2.useradmApiUrlv2}/permission_sets`, () => import_msw.HttpResponse.json(permissionSets)),
+  import_msw.http.post(`${import_constants2.useradmApiUrl}/users/:userId/assign`, async ({ request }) => {
+    const { tenant_ids } = await request.json();
+    return new import_msw.HttpResponse(null, { status: tenant_ids.length ? 200 : 577 });
+  }),
+  import_msw.http.get(`${import_constants2.useradmApiUrl}/users/tenants/:tenantId/token`, () => import_msw.HttpResponse.text("differentToken"))
+];
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  userHandlers
+});
+//# sourceMappingURL=userHandlers.cjs.map