@stratum-hq/control-plane 0.4.0 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/middleware/authorize.d.ts.map +1 -1
- package/dist/middleware/authorize.js +3 -1
- package/dist/middleware/authorize.js.map +1 -1
- package/package.json +14 -1
- package/dist/__tests__/admin-scope-query-string.test.d.ts +0 -2
- package/dist/__tests__/admin-scope-query-string.test.d.ts.map +0 -1
- package/dist/__tests__/admin-scope-query-string.test.js +0 -69
- package/dist/__tests__/admin-scope-query-string.test.js.map +0 -1
- package/dist/__tests__/api-keys.test.d.ts +0 -2
- package/dist/__tests__/api-keys.test.d.ts.map +0 -1
- package/dist/__tests__/api-keys.test.js +0 -240
- package/dist/__tests__/api-keys.test.js.map +0 -1
- package/dist/__tests__/auth.test.d.ts +0 -2
- package/dist/__tests__/auth.test.d.ts.map +0 -1
- package/dist/__tests__/auth.test.js +0 -229
- package/dist/__tests__/auth.test.js.map +0 -1
- package/dist/__tests__/config.test.d.ts +0 -2
- package/dist/__tests__/config.test.d.ts.map +0 -1
- package/dist/__tests__/config.test.js +0 -256
- package/dist/__tests__/config.test.js.map +0 -1
- package/dist/__tests__/configdiff-roles-scope.test.d.ts +0 -2
- package/dist/__tests__/configdiff-roles-scope.test.d.ts.map +0 -1
- package/dist/__tests__/configdiff-roles-scope.test.js +0 -246
- package/dist/__tests__/configdiff-roles-scope.test.js.map +0 -1
- package/dist/__tests__/default-deny.test.d.ts +0 -2
- package/dist/__tests__/default-deny.test.d.ts.map +0 -1
- package/dist/__tests__/default-deny.test.js +0 -92
- package/dist/__tests__/default-deny.test.js.map +0 -1
- package/dist/__tests__/tenant-create-scope.test.d.ts +0 -2
- package/dist/__tests__/tenant-create-scope.test.d.ts.map +0 -1
- package/dist/__tests__/tenant-create-scope.test.js +0 -129
- package/dist/__tests__/tenant-create-scope.test.js.map +0 -1
- package/dist/__tests__/tenant-move-scope.test.d.ts +0 -2
- package/dist/__tests__/tenant-move-scope.test.d.ts.map +0 -1
- package/dist/__tests__/tenant-move-scope.test.js +0 -113
- package/dist/__tests__/tenant-move-scope.test.js.map +0 -1
- package/dist/__tests__/tenants.test.d.ts +0 -2
- package/dist/__tests__/tenants.test.d.ts.map +0 -1
- package/dist/__tests__/tenants.test.js +0 -214
- package/dist/__tests__/tenants.test.js.map +0 -1
- package/dist/__tests__/test-helpers.d.ts +0 -71
- package/dist/__tests__/test-helpers.d.ts.map +0 -1
- package/dist/__tests__/test-helpers.js +0 -189
- package/dist/__tests__/test-helpers.js.map +0 -1
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../src/__tests__/auth.test.ts"],"names":[],"mappings":";;;;;AAAA,mCAAqE;AAErE,gEAA+B;AAC/B,uDAU2B;AAG3B,IAAA,iBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,GAAoB,CAAC;IACzB,IAAI,OAAgB,CAAC;IAErB,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAA,mCAAiB,GAAE,CAAC;QAC9B,GAAG,GAAG,MAAM,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,IAAA,kCAAgB,EAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,+BAAa,CAAC,CAAC;YAE5D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC1C,OAAO,CAAC,cAAsB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;aAC5C,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,sDAAsD;YACrD,OAAO,CAAC,cAAsB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE;aAChD,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACnD,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,+BAAa,CAAC,CAAC;YAE5D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,IAAA,4BAAU,EAAC,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;aAC5D,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,mDAAmD;YACnD,IAAA,eAAM,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,EAAE,aAAa,EAAE,2BAA2B,EAAE;aACxD,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,YAAY,GAAG,sBAAG,CAAC,IAAI,CAC3B,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EACtC,iCAAe,EACf,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CACzC,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE;aACrD,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,IAAA,4BAAU,EAAC,EAAE,EAAE,kBAAkB,CAAC;aAC5C,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAA,WAAE,EAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;aAC3C,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,gBAAgB;aACtB,CAAC,CAAC;YAEH,kEAAkE;YAClE,+BAA+B;YAC/B,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,yEAAyE;YACzE,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,gEAAgE;YAChE,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,gBAAgB;aACtB,CAAC,CAAC;YAEH,6DAA6D;YAC7D,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,IAAA,WAAE,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,IAAA,qCAAmB,EAAC,OAAO,CAAC,CAAC;YAE7B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,iBAAiB;gBACtB,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;aACxC,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,IAAA,qCAAmB,EAAC,OAAO,CAAC,CAAC;YAE7B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,QAAQ;gBAChB,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,IAAA,qCAAmB,EAAC,OAAO,CAAC,CAAC;YAE7B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,OAAO;gBACf,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC7B,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,IAAA,kCAAgB,EAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,YAAoB,CAAC,iBAAiB,CAAC,+BAAa,CAAC,CAAC;YAC9D,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,+BAAa,CAAC,CAAC;YAC3D,OAAO,CAAC,WAAmB,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAEnD,sBAAsB;YACtB,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACpC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,iBAAiB;gBACtB,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;aACxC,CAAC,CAAC;YACH,IAAA,eAAM,EAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE1C,qBAAqB;YACrB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACnC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,+BAAa,CAAC,EAAE,EAAE;gBAC1C,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YACH,IAAA,eAAM,EAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEzC,sCAAsC;YACtC,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACrC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,kBAAkB;gBACvB,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YACH,IAAA,eAAM,EAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,IAAA,kCAAgB,EAAC,OAAO,CAAC,CAAC;YAE1B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,kBAAkB;gBACvB,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACpD,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,+BAAa,CAAC,CAAC;YAE5D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,iBAAiB;gBACtB,OAAO,EAAE,IAAA,4BAAU,EAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;aACxC,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACpE,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,+BAAa,CAAC,CAAC;YAC3D,OAAO,CAAC,WAAmB,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAEnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,kBAAkB;gBACvB,OAAO,EAAE,IAAA,4BAAU,EAAC,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;aAC5D,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"config.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,256 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const vitest_1 = require("vitest");
|
|
4
|
-
const test_helpers_js_1 = require("./test-helpers.js");
|
|
5
|
-
(0, vitest_1.describe)("Config Routes", () => {
|
|
6
|
-
let app;
|
|
7
|
-
let stratum;
|
|
8
|
-
const tenantId = test_helpers_js_1.SAMPLE_TENANT.id;
|
|
9
|
-
(0, vitest_1.beforeEach)(async () => {
|
|
10
|
-
stratum = (0, test_helpers_js_1.createMockStratum)();
|
|
11
|
-
(0, test_helpers_js_1.setupAdminApiKey)(stratum);
|
|
12
|
-
app = await (0, test_helpers_js_1.buildTestApp)(stratum);
|
|
13
|
-
});
|
|
14
|
-
(0, vitest_1.afterEach)(async () => {
|
|
15
|
-
await app.close();
|
|
16
|
-
});
|
|
17
|
-
// ── GET /api/v1/tenants/:id/config ──────────────────────────────────
|
|
18
|
-
(0, vitest_1.describe)("GET /api/v1/tenants/:id/config", () => {
|
|
19
|
-
(0, vitest_1.it)("returns resolved config for the tenant", async () => {
|
|
20
|
-
const resolvedConfig = {
|
|
21
|
-
"feature.dark_mode": {
|
|
22
|
-
value: true,
|
|
23
|
-
source_tenant_id: tenantId,
|
|
24
|
-
locked: false,
|
|
25
|
-
sensitive: false,
|
|
26
|
-
},
|
|
27
|
-
"limits.max_users": {
|
|
28
|
-
value: 100,
|
|
29
|
-
source_tenant_id: tenantId,
|
|
30
|
-
locked: false,
|
|
31
|
-
sensitive: false,
|
|
32
|
-
},
|
|
33
|
-
};
|
|
34
|
-
stratum.resolveConfig.mockResolvedValue(resolvedConfig);
|
|
35
|
-
const response = await app.inject({
|
|
36
|
-
method: "GET",
|
|
37
|
-
url: `/api/v1/tenants/${tenantId}/config`,
|
|
38
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
39
|
-
});
|
|
40
|
-
(0, vitest_1.expect)(response.statusCode).toBe(200);
|
|
41
|
-
const body = response.json();
|
|
42
|
-
(0, vitest_1.expect)(body["feature.dark_mode"].value).toBe(true);
|
|
43
|
-
(0, vitest_1.expect)(body["limits.max_users"].value).toBe(100);
|
|
44
|
-
(0, vitest_1.expect)(stratum.resolveConfig).toHaveBeenCalledWith(tenantId);
|
|
45
|
-
});
|
|
46
|
-
(0, vitest_1.it)("returns empty object when tenant has no config", async () => {
|
|
47
|
-
stratum.resolveConfig.mockResolvedValue({});
|
|
48
|
-
const response = await app.inject({
|
|
49
|
-
method: "GET",
|
|
50
|
-
url: `/api/v1/tenants/${tenantId}/config`,
|
|
51
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
52
|
-
});
|
|
53
|
-
(0, vitest_1.expect)(response.statusCode).toBe(200);
|
|
54
|
-
(0, vitest_1.expect)(response.json()).toEqual({});
|
|
55
|
-
});
|
|
56
|
-
});
|
|
57
|
-
// ── PUT /api/v1/tenants/:id/config/:key ─────────────────────────────
|
|
58
|
-
(0, vitest_1.describe)("PUT /api/v1/tenants/:id/config/:key", () => {
|
|
59
|
-
(0, vitest_1.it)("sets a config value and returns the entry", async () => {
|
|
60
|
-
const configEntry = {
|
|
61
|
-
tenant_id: tenantId,
|
|
62
|
-
key: "feature.dark_mode",
|
|
63
|
-
value: true,
|
|
64
|
-
locked: false,
|
|
65
|
-
sensitive: false,
|
|
66
|
-
created_at: new Date().toISOString(),
|
|
67
|
-
updated_at: new Date().toISOString(),
|
|
68
|
-
};
|
|
69
|
-
stratum.setConfig.mockResolvedValue(configEntry);
|
|
70
|
-
const response = await app.inject({
|
|
71
|
-
method: "PUT",
|
|
72
|
-
url: `/api/v1/tenants/${tenantId}/config/feature.dark_mode`,
|
|
73
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
74
|
-
payload: { value: true },
|
|
75
|
-
});
|
|
76
|
-
(0, vitest_1.expect)(response.statusCode).toBe(200);
|
|
77
|
-
const body = response.json();
|
|
78
|
-
(0, vitest_1.expect)(body.key).toBe("feature.dark_mode");
|
|
79
|
-
(0, vitest_1.expect)(body.value).toBe(true);
|
|
80
|
-
(0, vitest_1.expect)(stratum.setConfig).toHaveBeenCalledOnce();
|
|
81
|
-
});
|
|
82
|
-
(0, vitest_1.it)("sets a locked config value", async () => {
|
|
83
|
-
const configEntry = {
|
|
84
|
-
tenant_id: tenantId,
|
|
85
|
-
key: "branding.logo_url",
|
|
86
|
-
value: "https://example.com/logo.png",
|
|
87
|
-
locked: true,
|
|
88
|
-
sensitive: false,
|
|
89
|
-
created_at: new Date().toISOString(),
|
|
90
|
-
updated_at: new Date().toISOString(),
|
|
91
|
-
};
|
|
92
|
-
stratum.setConfig.mockResolvedValue(configEntry);
|
|
93
|
-
const response = await app.inject({
|
|
94
|
-
method: "PUT",
|
|
95
|
-
url: `/api/v1/tenants/${tenantId}/config/branding.logo_url`,
|
|
96
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
97
|
-
payload: { value: "https://example.com/logo.png", locked: true },
|
|
98
|
-
});
|
|
99
|
-
(0, vitest_1.expect)(response.statusCode).toBe(200);
|
|
100
|
-
(0, vitest_1.expect)(response.json().locked).toBe(true);
|
|
101
|
-
});
|
|
102
|
-
});
|
|
103
|
-
// ── PUT /api/v1/tenants/:id/config/batch ────────────────────────────
|
|
104
|
-
(0, vitest_1.describe)("PUT /api/v1/tenants/:id/config/batch", () => {
|
|
105
|
-
(0, vitest_1.it)("batch sets config with partial success", async () => {
|
|
106
|
-
const batchResult = {
|
|
107
|
-
results: [
|
|
108
|
-
{
|
|
109
|
-
key: "feature.a",
|
|
110
|
-
status: "ok",
|
|
111
|
-
entry: {
|
|
112
|
-
tenant_id: tenantId,
|
|
113
|
-
key: "feature.a",
|
|
114
|
-
value: true,
|
|
115
|
-
locked: false,
|
|
116
|
-
sensitive: false,
|
|
117
|
-
},
|
|
118
|
-
},
|
|
119
|
-
{
|
|
120
|
-
key: "feature.b",
|
|
121
|
-
status: "error",
|
|
122
|
-
error: "CONFIG_LOCKED",
|
|
123
|
-
message: "Config 'feature.b' is locked by tenant parent-id and cannot be overridden",
|
|
124
|
-
},
|
|
125
|
-
],
|
|
126
|
-
succeeded: 1,
|
|
127
|
-
failed: 1,
|
|
128
|
-
};
|
|
129
|
-
stratum.batchSetConfig.mockResolvedValue(batchResult);
|
|
130
|
-
const response = await app.inject({
|
|
131
|
-
method: "PUT",
|
|
132
|
-
url: `/api/v1/tenants/${tenantId}/config/batch`,
|
|
133
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
134
|
-
payload: {
|
|
135
|
-
entries: [
|
|
136
|
-
{ key: "feature.a", value: true },
|
|
137
|
-
{ key: "feature.b", value: false },
|
|
138
|
-
],
|
|
139
|
-
},
|
|
140
|
-
});
|
|
141
|
-
(0, vitest_1.expect)(response.statusCode).toBe(200);
|
|
142
|
-
const body = response.json();
|
|
143
|
-
(0, vitest_1.expect)(body.succeeded).toBe(1);
|
|
144
|
-
(0, vitest_1.expect)(body.failed).toBe(1);
|
|
145
|
-
(0, vitest_1.expect)(body.results).toHaveLength(2);
|
|
146
|
-
(0, vitest_1.expect)(stratum.batchSetConfig).toHaveBeenCalledOnce();
|
|
147
|
-
});
|
|
148
|
-
(0, vitest_1.it)("returns 400 for empty entries array", async () => {
|
|
149
|
-
const response = await app.inject({
|
|
150
|
-
method: "PUT",
|
|
151
|
-
url: `/api/v1/tenants/${tenantId}/config/batch`,
|
|
152
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
153
|
-
payload: { entries: [] },
|
|
154
|
-
});
|
|
155
|
-
(0, vitest_1.expect)(response.statusCode).toBe(400);
|
|
156
|
-
(0, vitest_1.expect)(response.json().error.code).toBe("VALIDATION_ERROR");
|
|
157
|
-
});
|
|
158
|
-
(0, vitest_1.it)("returns 400 when entries field is missing", async () => {
|
|
159
|
-
const response = await app.inject({
|
|
160
|
-
method: "PUT",
|
|
161
|
-
url: `/api/v1/tenants/${tenantId}/config/batch`,
|
|
162
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
163
|
-
payload: {},
|
|
164
|
-
});
|
|
165
|
-
(0, vitest_1.expect)(response.statusCode).toBe(400);
|
|
166
|
-
});
|
|
167
|
-
});
|
|
168
|
-
// ── DELETE /api/v1/tenants/:id/config/:key ──────────────────────────
|
|
169
|
-
(0, vitest_1.describe)("DELETE /api/v1/tenants/:id/config/:key", () => {
|
|
170
|
-
(0, vitest_1.it)("deletes a config override and returns 204", async () => {
|
|
171
|
-
stratum.deleteConfig.mockResolvedValue(undefined);
|
|
172
|
-
const response = await app.inject({
|
|
173
|
-
method: "DELETE",
|
|
174
|
-
url: `/api/v1/tenants/${tenantId}/config/feature.dark_mode`,
|
|
175
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
176
|
-
});
|
|
177
|
-
(0, vitest_1.expect)(response.statusCode).toBe(204);
|
|
178
|
-
(0, vitest_1.expect)(response.body).toBe("");
|
|
179
|
-
(0, vitest_1.expect)(stratum.deleteConfig).toHaveBeenCalledOnce();
|
|
180
|
-
(0, vitest_1.expect)(stratum.deleteConfig.mock.calls[0][0]).toBe(tenantId);
|
|
181
|
-
(0, vitest_1.expect)(stratum.deleteConfig.mock.calls[0][1]).toBe("feature.dark_mode");
|
|
182
|
-
});
|
|
183
|
-
});
|
|
184
|
-
// ── Locked key error ────────────────────────────────────────────────
|
|
185
|
-
(0, vitest_1.describe)("Locked key error", () => {
|
|
186
|
-
(0, vitest_1.it)("returns 403 when trying to override a locked config key", async () => {
|
|
187
|
-
const { ConfigLockedError } = await import("@stratum-hq/core");
|
|
188
|
-
stratum.setConfig.mockRejectedValue(new ConfigLockedError("feature.locked_key", "parent-tenant-id"));
|
|
189
|
-
const response = await app.inject({
|
|
190
|
-
method: "PUT",
|
|
191
|
-
url: `/api/v1/tenants/${tenantId}/config/feature.locked_key`,
|
|
192
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
193
|
-
payload: { value: "anything" },
|
|
194
|
-
});
|
|
195
|
-
(0, vitest_1.expect)(response.statusCode).toBe(403);
|
|
196
|
-
const body = response.json();
|
|
197
|
-
(0, vitest_1.expect)(body.error.code).toBe("CONFIG_LOCKED");
|
|
198
|
-
});
|
|
199
|
-
});
|
|
200
|
-
// ── GET /api/v1/config/diff ─────────────────────────────────────────
|
|
201
|
-
(0, vitest_1.describe)("GET /api/v1/config/diff", () => {
|
|
202
|
-
(0, vitest_1.it)("returns diff between two tenants", async () => {
|
|
203
|
-
const diffResult = {
|
|
204
|
-
tenant_a: { id: test_helpers_js_1.SAMPLE_TENANT.id, name: test_helpers_js_1.SAMPLE_TENANT.name },
|
|
205
|
-
tenant_b: { id: test_helpers_js_1.SAMPLE_CHILD_TENANT.id, name: test_helpers_js_1.SAMPLE_CHILD_TENANT.name },
|
|
206
|
-
diff: [
|
|
207
|
-
{
|
|
208
|
-
key: "feature.dark_mode",
|
|
209
|
-
tenant_a: { value: true, status: "own", source: test_helpers_js_1.SAMPLE_TENANT.id },
|
|
210
|
-
tenant_b: { value: true, status: "inherited", source: test_helpers_js_1.SAMPLE_TENANT.id },
|
|
211
|
-
},
|
|
212
|
-
{
|
|
213
|
-
key: "limits.max_users",
|
|
214
|
-
tenant_a: { value: 100, status: "locked", source: test_helpers_js_1.SAMPLE_TENANT.id },
|
|
215
|
-
tenant_b: null,
|
|
216
|
-
},
|
|
217
|
-
],
|
|
218
|
-
};
|
|
219
|
-
stratum.diffConfig.mockResolvedValue(diffResult);
|
|
220
|
-
const response = await app.inject({
|
|
221
|
-
method: "GET",
|
|
222
|
-
url: `/api/v1/config/diff?tenant_a=${test_helpers_js_1.SAMPLE_TENANT.id}&tenant_b=${test_helpers_js_1.SAMPLE_CHILD_TENANT.id}`,
|
|
223
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
224
|
-
});
|
|
225
|
-
(0, vitest_1.expect)(response.statusCode).toBe(200);
|
|
226
|
-
const body = response.json();
|
|
227
|
-
(0, vitest_1.expect)(body.tenant_a.id).toBe(test_helpers_js_1.SAMPLE_TENANT.id);
|
|
228
|
-
(0, vitest_1.expect)(body.tenant_b.id).toBe(test_helpers_js_1.SAMPLE_CHILD_TENANT.id);
|
|
229
|
-
(0, vitest_1.expect)(body.diff).toHaveLength(2);
|
|
230
|
-
(0, vitest_1.expect)(body.diff[0].key).toBe("feature.dark_mode");
|
|
231
|
-
(0, vitest_1.expect)(body.diff[0].tenant_a.status).toBe("own");
|
|
232
|
-
(0, vitest_1.expect)(body.diff[0].tenant_b.status).toBe("inherited");
|
|
233
|
-
(0, vitest_1.expect)(body.diff[1].tenant_b).toBeNull();
|
|
234
|
-
(0, vitest_1.expect)(stratum.diffConfig).toHaveBeenCalledWith(test_helpers_js_1.SAMPLE_TENANT.id, test_helpers_js_1.SAMPLE_CHILD_TENANT.id);
|
|
235
|
-
});
|
|
236
|
-
(0, vitest_1.it)("returns 400 when tenant_a is missing", async () => {
|
|
237
|
-
const response = await app.inject({
|
|
238
|
-
method: "GET",
|
|
239
|
-
url: `/api/v1/config/diff?tenant_b=${test_helpers_js_1.SAMPLE_CHILD_TENANT.id}`,
|
|
240
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
241
|
-
});
|
|
242
|
-
(0, vitest_1.expect)(response.statusCode).toBe(400);
|
|
243
|
-
(0, vitest_1.expect)(response.json().error.code).toBe("VALIDATION_ERROR");
|
|
244
|
-
});
|
|
245
|
-
(0, vitest_1.it)("returns 400 when both tenants are the same", async () => {
|
|
246
|
-
const response = await app.inject({
|
|
247
|
-
method: "GET",
|
|
248
|
-
url: `/api/v1/config/diff?tenant_a=${test_helpers_js_1.SAMPLE_TENANT.id}&tenant_b=${test_helpers_js_1.SAMPLE_TENANT.id}`,
|
|
249
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
250
|
-
});
|
|
251
|
-
(0, vitest_1.expect)(response.statusCode).toBe(400);
|
|
252
|
-
(0, vitest_1.expect)(response.json().error.code).toBe("VALIDATION_ERROR");
|
|
253
|
-
});
|
|
254
|
-
});
|
|
255
|
-
});
|
|
256
|
-
//# sourceMappingURL=config.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":";;AAAA,mCAAqE;AAErE,uDAO2B;AAG3B,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,GAAoB,CAAC;IACzB,IAAI,OAAgB,CAAC;IACrB,MAAM,QAAQ,GAAG,+BAAa,CAAC,EAAE,CAAC;IAElC,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAA,mCAAiB,GAAE,CAAC;QAC9B,IAAA,kCAAgB,EAAC,OAAO,CAAC,CAAC;QAC1B,GAAG,GAAG,MAAM,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,IAAA,WAAE,EAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,cAAc,GAAG;gBACrB,mBAAmB,EAAE;oBACnB,KAAK,EAAE,IAAI;oBACX,gBAAgB,EAAE,QAAQ;oBAC1B,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,KAAK;iBACjB;gBACD,kBAAkB,EAAE;oBAClB,KAAK,EAAE,GAAG;oBACV,gBAAgB,EAAE,QAAQ;oBAC1B,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,KAAK;iBACjB;aACF,CAAC;YACD,OAAO,CAAC,aAAqB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAEjE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,SAAS;gBACzC,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,IAAA,eAAM,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC7D,OAAO,CAAC,aAAqB,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,SAAS;gBACzC,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,IAAA,WAAE,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,QAAQ;gBACnB,GAAG,EAAE,mBAAmB;gBACxB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;YACD,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAE1D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,2BAA2B;gBAC3D,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;aACzB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC3C,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAA,eAAM,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,QAAQ;gBACnB,GAAG,EAAE,mBAAmB;gBACxB,KAAK,EAAE,8BAA8B;gBACrC,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;YACD,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAE1D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,2BAA2B;gBAC3D,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,IAAI,EAAE;aACjE,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,IAAA,WAAE,EAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,WAAW,GAAG;gBAClB,OAAO,EAAE;oBACP;wBACE,GAAG,EAAE,WAAW;wBAChB,MAAM,EAAE,IAAI;wBACZ,KAAK,EAAE;4BACL,SAAS,EAAE,QAAQ;4BACnB,GAAG,EAAE,WAAW;4BAChB,KAAK,EAAE,IAAI;4BACX,MAAM,EAAE,KAAK;4BACb,SAAS,EAAE,KAAK;yBACjB;qBACF;oBACD;wBACE,GAAG,EAAE,WAAW;wBAChB,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,eAAe;wBACtB,OAAO,EAAE,2EAA2E;qBACrF;iBACF;gBACD,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;aACV,CAAC;YACD,OAAO,CAAC,cAAsB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAE/D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,eAAe;gBAC/C,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE;oBACP,OAAO,EAAE;wBACP,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;wBACjC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE;qBACnC;iBACF;aACF,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAA,eAAM,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAA,eAAM,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACrC,IAAA,eAAM,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,eAAe;gBAC/C,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;aACzB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,eAAe;gBAC/C,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE;aACZ,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,wCAAwC,EAAE,GAAG,EAAE;QACtD,IAAA,WAAE,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACxD,OAAO,CAAC,YAAoB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,QAAQ;gBAChB,GAAG,EAAE,mBAAmB,QAAQ,2BAA2B;gBAC3D,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAA,eAAM,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;YACpD,IAAA,eAAM,EAAE,OAAO,CAAC,YAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtE,IAAA,eAAM,EAAE,OAAO,CAAC,YAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAA,WAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC9D,OAAO,CAAC,SAAiB,CAAC,iBAAiB,CAC1C,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAChE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,mBAAmB,QAAQ,4BAA4B;gBAC5D,OAAO,EAAE,IAAA,6BAAW,GAAE;gBACtB,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;aAC/B,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uEAAuE;IAEvE,IAAA,iBAAQ,EAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,IAAA,WAAE,EAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,UAAU,GAAG;gBACjB,QAAQ,EAAE,EAAE,EAAE,EAAE,+BAAa,CAAC,EAAE,EAAE,IAAI,EAAE,+BAAa,CAAC,IAAI,EAAE;gBAC5D,QAAQ,EAAE,EAAE,EAAE,EAAE,qCAAmB,CAAC,EAAE,EAAE,IAAI,EAAE,qCAAmB,CAAC,IAAI,EAAE;gBACxE,IAAI,EAAE;oBACJ;wBACE,GAAG,EAAE,mBAAmB;wBACxB,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,+BAAa,CAAC,EAAE,EAAE;wBAClE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,+BAAa,CAAC,EAAE,EAAE;qBACzE;oBACD;wBACE,GAAG,EAAE,kBAAkB;wBACvB,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAAa,CAAC,EAAE,EAAE;wBACpE,QAAQ,EAAE,IAAI;qBACf;iBACF;aACF,CAAC;YACD,OAAO,CAAC,UAAkB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAE1D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,gCAAgC,+BAAa,CAAC,EAAE,aAAa,qCAAmB,CAAC,EAAE,EAAE;gBAC1F,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,+BAAa,CAAC,EAAE,CAAC,CAAC;YAChD,IAAA,eAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAmB,CAAC,EAAE,CAAC,CAAC;YACtD,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAClC,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,+BAAa,CAAC,EAAE,EAAE,qCAAmB,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,gCAAgC,qCAAmB,CAAC,EAAE,EAAE;gBAC7D,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,gCAAgC,+BAAa,CAAC,EAAE,aAAa,+BAAa,CAAC,EAAE,EAAE;gBACpF,OAAO,EAAE,IAAA,6BAAW,GAAE;aACvB,CAAC,CAAC;YAEH,IAAA,eAAM,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"configdiff-roles-scope.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/configdiff-roles-scope.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,246 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const vitest_1 = require("vitest");
|
|
4
|
-
const test_helpers_js_1 = require("./test-helpers.js");
|
|
5
|
-
/**
|
|
6
|
-
* Regression tests for cross-tenant authorization on the config-diff and role
|
|
7
|
-
* administration routes.
|
|
8
|
-
*
|
|
9
|
-
* Both route groups were declared "global" for the default-deny enforcer, which
|
|
10
|
-
* is behavior-preserving but performs no per-tenant check. That left a
|
|
11
|
-
* tenant-scoped API key able to reach tenants outside its own subtree:
|
|
12
|
-
* - config diff compares two tenants read from the query string;
|
|
13
|
-
* - role routes read/mutate roles owned by an arbitrary tenant.
|
|
14
|
-
*
|
|
15
|
-
* A scoped key must be confined to its own tenant and descendants. Global
|
|
16
|
-
* operator keys (tenant_id === null) keep unrestricted access.
|
|
17
|
-
*/
|
|
18
|
-
const ATTACKER = "11111111-1111-4111-8111-111111111111";
|
|
19
|
-
const ATTACKER_CHILD = "22222222-2222-4222-8222-222222222222";
|
|
20
|
-
const VICTIM = "99999999-9999-4999-8999-999999999999";
|
|
21
|
-
// ancestry_path holds a tenant's ANCESTORS and excludes self, so a root is "".
|
|
22
|
-
const TENANTS = {
|
|
23
|
-
[ATTACKER]: { id: ATTACKER, ancestry_path: "", status: "active" },
|
|
24
|
-
[ATTACKER_CHILD]: { id: ATTACKER_CHILD, ancestry_path: ATTACKER, status: "active" },
|
|
25
|
-
[VICTIM]: { id: VICTIM, ancestry_path: "", status: "active" },
|
|
26
|
-
};
|
|
27
|
-
const ROLE_OWN = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
|
|
28
|
-
const ROLE_FOREIGN = "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb";
|
|
29
|
-
const ROLE_GLOBAL = "cccccccc-cccc-4ccc-8ccc-cccccccccccc";
|
|
30
|
-
const ROLES = {
|
|
31
|
-
[ROLE_OWN]: { id: ROLE_OWN, name: "own", description: null, scopes: ["read"], tenant_id: ATTACKER },
|
|
32
|
-
[ROLE_FOREIGN]: { id: ROLE_FOREIGN, name: "foreign", description: null, scopes: ["read"], tenant_id: VICTIM },
|
|
33
|
-
[ROLE_GLOBAL]: { id: ROLE_GLOBAL, name: "global", description: null, scopes: ["read"], tenant_id: null },
|
|
34
|
-
};
|
|
35
|
-
const OWN_KEY = "own-key-id";
|
|
36
|
-
const FOREIGN_KEY = "foreign-key-id";
|
|
37
|
-
const KEYS = {
|
|
38
|
-
[OWN_KEY]: { id: OWN_KEY, tenant_id: ATTACKER },
|
|
39
|
-
[FOREIGN_KEY]: { id: FOREIGN_KEY, tenant_id: VICTIM },
|
|
40
|
-
};
|
|
41
|
-
let app;
|
|
42
|
-
let stratum;
|
|
43
|
-
function wireCommonMocks() {
|
|
44
|
-
stratum.getTenant.mockImplementation(async (id) => {
|
|
45
|
-
const row = TENANTS[id];
|
|
46
|
-
if (!row)
|
|
47
|
-
throw new Error(`Tenant ${id} not found`);
|
|
48
|
-
return row;
|
|
49
|
-
});
|
|
50
|
-
stratum.diffConfig.mockResolvedValue({ added: {}, removed: {}, changed: {} });
|
|
51
|
-
stratum.getRole.mockImplementation(async (id) => ROLES[id] ?? null);
|
|
52
|
-
// Without a tenant filter, listing returns every tenant's roles: this is the leak.
|
|
53
|
-
stratum.listRoles.mockImplementation(async (tenantId) => {
|
|
54
|
-
const all = Object.values(ROLES);
|
|
55
|
-
if (!tenantId)
|
|
56
|
-
return all;
|
|
57
|
-
return all.filter((r) => r.tenant_id === tenantId || r.tenant_id === null);
|
|
58
|
-
});
|
|
59
|
-
stratum.createRole.mockImplementation(async (input) => ({
|
|
60
|
-
id: "new-role",
|
|
61
|
-
description: null,
|
|
62
|
-
...input,
|
|
63
|
-
}));
|
|
64
|
-
stratum.updateRole.mockImplementation(async (id) => ROLES[id] ?? null);
|
|
65
|
-
stratum.deleteRole.mockResolvedValue(true);
|
|
66
|
-
stratum.assignRoleToKey.mockResolvedValue(true);
|
|
67
|
-
stratum.removeRoleFromKey.mockResolvedValue(true);
|
|
68
|
-
stratum.getApiKey.mockImplementation(async (id) => KEYS[id] ?? null);
|
|
69
|
-
}
|
|
70
|
-
async function diff(tenantA, tenantB) {
|
|
71
|
-
return app.inject({
|
|
72
|
-
method: "GET",
|
|
73
|
-
url: `/api/v1/config/diff?tenant_a=${tenantA}&tenant_b=${tenantB}`,
|
|
74
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
75
|
-
});
|
|
76
|
-
}
|
|
77
|
-
(0, vitest_1.describe)("config diff scopes both compared tenants to the caller's subtree", () => {
|
|
78
|
-
(0, vitest_1.beforeEach)(async () => {
|
|
79
|
-
stratum = (0, test_helpers_js_1.createMockStratum)();
|
|
80
|
-
stratum.validateApiKey.mockResolvedValue({
|
|
81
|
-
key_id: "attacker-key",
|
|
82
|
-
tenant_id: ATTACKER,
|
|
83
|
-
scopes: ["read", "write", "admin"],
|
|
84
|
-
rate_limit_max: null,
|
|
85
|
-
rate_limit_window: null,
|
|
86
|
-
});
|
|
87
|
-
wireCommonMocks();
|
|
88
|
-
app = await (0, test_helpers_js_1.buildTestApp)(stratum);
|
|
89
|
-
});
|
|
90
|
-
(0, vitest_1.it)("refuses diffing against an unrelated tenant", async () => {
|
|
91
|
-
const res = await diff(ATTACKER, VICTIM);
|
|
92
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
93
|
-
(0, vitest_1.expect)(stratum.diffConfig).not.toHaveBeenCalled();
|
|
94
|
-
});
|
|
95
|
-
(0, vitest_1.it)("refuses when the first tenant is unrelated", async () => {
|
|
96
|
-
const res = await diff(VICTIM, ATTACKER);
|
|
97
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
98
|
-
(0, vitest_1.expect)(stratum.diffConfig).not.toHaveBeenCalled();
|
|
99
|
-
});
|
|
100
|
-
(0, vitest_1.it)("allows diffing entirely within the caller's subtree", async () => {
|
|
101
|
-
const res = await diff(ATTACKER, ATTACKER_CHILD);
|
|
102
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
103
|
-
(0, vitest_1.expect)(stratum.diffConfig).toHaveBeenCalledWith(ATTACKER, ATTACKER_CHILD);
|
|
104
|
-
});
|
|
105
|
-
});
|
|
106
|
-
(0, vitest_1.describe)("role routes scope to the caller's subtree", () => {
|
|
107
|
-
(0, vitest_1.beforeEach)(async () => {
|
|
108
|
-
stratum = (0, test_helpers_js_1.createMockStratum)();
|
|
109
|
-
stratum.validateApiKey.mockResolvedValue({
|
|
110
|
-
key_id: "attacker-key",
|
|
111
|
-
tenant_id: ATTACKER,
|
|
112
|
-
scopes: ["read", "write", "admin"],
|
|
113
|
-
rate_limit_max: null,
|
|
114
|
-
rate_limit_window: null,
|
|
115
|
-
});
|
|
116
|
-
wireCommonMocks();
|
|
117
|
-
app = await (0, test_helpers_js_1.buildTestApp)(stratum);
|
|
118
|
-
});
|
|
119
|
-
(0, vitest_1.it)("does not enumerate other tenants' roles when listing without a filter", async () => {
|
|
120
|
-
const res = await app.inject({ method: "GET", url: "/api/v1/roles", headers: (0, test_helpers_js_1.authHeaders)() });
|
|
121
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
122
|
-
const ids = res.json().map((r) => r.id);
|
|
123
|
-
(0, vitest_1.expect)(ids).not.toContain(ROLE_FOREIGN);
|
|
124
|
-
(0, vitest_1.expect)(ids).toContain(ROLE_OWN);
|
|
125
|
-
});
|
|
126
|
-
(0, vitest_1.it)("refuses listing a foreign tenant's roles by explicit filter", async () => {
|
|
127
|
-
const res = await app.inject({
|
|
128
|
-
method: "GET",
|
|
129
|
-
url: `/api/v1/roles?tenant_id=${VICTIM}`,
|
|
130
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
131
|
-
});
|
|
132
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
133
|
-
(0, vitest_1.expect)(stratum.listRoles).not.toHaveBeenCalled();
|
|
134
|
-
});
|
|
135
|
-
(0, vitest_1.it)("refuses reading a foreign tenant's role", async () => {
|
|
136
|
-
const res = await app.inject({ method: "GET", url: `/api/v1/roles/${ROLE_FOREIGN}`, headers: (0, test_helpers_js_1.authHeaders)() });
|
|
137
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
138
|
-
});
|
|
139
|
-
(0, vitest_1.it)("allows reading a role in the caller's own tenant", async () => {
|
|
140
|
-
const res = await app.inject({ method: "GET", url: `/api/v1/roles/${ROLE_OWN}`, headers: (0, test_helpers_js_1.authHeaders)() });
|
|
141
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
142
|
-
});
|
|
143
|
-
(0, vitest_1.it)("refuses updating a foreign tenant's role", async () => {
|
|
144
|
-
const res = await app.inject({
|
|
145
|
-
method: "PATCH",
|
|
146
|
-
url: `/api/v1/roles/${ROLE_FOREIGN}`,
|
|
147
|
-
headers: { ...(0, test_helpers_js_1.authHeaders)(), "content-type": "application/json" },
|
|
148
|
-
payload: { name: "hijacked" },
|
|
149
|
-
});
|
|
150
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
151
|
-
(0, vitest_1.expect)(stratum.updateRole).not.toHaveBeenCalled();
|
|
152
|
-
});
|
|
153
|
-
(0, vitest_1.it)("refuses deleting a foreign tenant's role", async () => {
|
|
154
|
-
const res = await app.inject({ method: "DELETE", url: `/api/v1/roles/${ROLE_FOREIGN}`, headers: (0, test_helpers_js_1.authHeaders)() });
|
|
155
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
156
|
-
(0, vitest_1.expect)(stratum.deleteRole).not.toHaveBeenCalled();
|
|
157
|
-
});
|
|
158
|
-
(0, vitest_1.it)("refuses creating a role in a foreign tenant", async () => {
|
|
159
|
-
const res = await app.inject({
|
|
160
|
-
method: "POST",
|
|
161
|
-
url: "/api/v1/roles",
|
|
162
|
-
headers: { ...(0, test_helpers_js_1.authHeaders)(), "content-type": "application/json" },
|
|
163
|
-
payload: { name: "planted", scopes: ["read"], tenant_id: VICTIM },
|
|
164
|
-
});
|
|
165
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
166
|
-
(0, vitest_1.expect)(stratum.createRole).not.toHaveBeenCalled();
|
|
167
|
-
});
|
|
168
|
-
(0, vitest_1.it)("refuses assigning a foreign tenant's role to an own key", async () => {
|
|
169
|
-
const res = await app.inject({
|
|
170
|
-
method: "POST",
|
|
171
|
-
url: `/api/v1/roles/assign/${OWN_KEY}`,
|
|
172
|
-
headers: { ...(0, test_helpers_js_1.authHeaders)(), "content-type": "application/json" },
|
|
173
|
-
payload: { role_id: ROLE_FOREIGN },
|
|
174
|
-
});
|
|
175
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
176
|
-
(0, vitest_1.expect)(stratum.assignRoleToKey).not.toHaveBeenCalled();
|
|
177
|
-
});
|
|
178
|
-
(0, vitest_1.it)("refuses assigning a role to a key in another tenant", async () => {
|
|
179
|
-
const res = await app.inject({
|
|
180
|
-
method: "POST",
|
|
181
|
-
url: `/api/v1/roles/assign/${FOREIGN_KEY}`,
|
|
182
|
-
headers: { ...(0, test_helpers_js_1.authHeaders)(), "content-type": "application/json" },
|
|
183
|
-
payload: { role_id: ROLE_OWN },
|
|
184
|
-
});
|
|
185
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
186
|
-
(0, vitest_1.expect)(stratum.assignRoleToKey).not.toHaveBeenCalled();
|
|
187
|
-
});
|
|
188
|
-
(0, vitest_1.it)("refuses removing a role from a key in another tenant", async () => {
|
|
189
|
-
const res = await app.inject({
|
|
190
|
-
method: "DELETE",
|
|
191
|
-
url: `/api/v1/roles/assign/${FOREIGN_KEY}`,
|
|
192
|
-
headers: (0, test_helpers_js_1.authHeaders)(),
|
|
193
|
-
});
|
|
194
|
-
(0, vitest_1.expect)(res.statusCode).toBe(403);
|
|
195
|
-
(0, vitest_1.expect)(stratum.removeRoleFromKey).not.toHaveBeenCalled();
|
|
196
|
-
});
|
|
197
|
-
(0, vitest_1.it)("allows assigning an own role to an own key", async () => {
|
|
198
|
-
const res = await app.inject({
|
|
199
|
-
method: "POST",
|
|
200
|
-
url: `/api/v1/roles/assign/${OWN_KEY}`,
|
|
201
|
-
headers: { ...(0, test_helpers_js_1.authHeaders)(), "content-type": "application/json" },
|
|
202
|
-
payload: { role_id: ROLE_OWN },
|
|
203
|
-
});
|
|
204
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
205
|
-
(0, vitest_1.expect)(stratum.assignRoleToKey).toHaveBeenCalledWith(OWN_KEY, ROLE_OWN);
|
|
206
|
-
});
|
|
207
|
-
});
|
|
208
|
-
(0, vitest_1.describe)("global operator keys keep full access", () => {
|
|
209
|
-
(0, vitest_1.beforeEach)(async () => {
|
|
210
|
-
stratum = (0, test_helpers_js_1.createMockStratum)();
|
|
211
|
-
stratum.validateApiKey.mockResolvedValue({
|
|
212
|
-
key_id: "global-key",
|
|
213
|
-
tenant_id: null,
|
|
214
|
-
scopes: ["read", "write", "admin"],
|
|
215
|
-
rate_limit_max: null,
|
|
216
|
-
rate_limit_window: null,
|
|
217
|
-
});
|
|
218
|
-
wireCommonMocks();
|
|
219
|
-
app = await (0, test_helpers_js_1.buildTestApp)(stratum);
|
|
220
|
-
});
|
|
221
|
-
(0, vitest_1.it)("still diffs any two tenants", async () => {
|
|
222
|
-
const res = await diff(ATTACKER, VICTIM);
|
|
223
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
224
|
-
(0, vitest_1.expect)(stratum.diffConfig).toHaveBeenCalledWith(ATTACKER, VICTIM);
|
|
225
|
-
});
|
|
226
|
-
(0, vitest_1.it)("still enumerates every tenant's roles", async () => {
|
|
227
|
-
const res = await app.inject({ method: "GET", url: "/api/v1/roles", headers: (0, test_helpers_js_1.authHeaders)() });
|
|
228
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
229
|
-
(0, vitest_1.expect)(res.json().map((r) => r.id)).toContain(ROLE_FOREIGN);
|
|
230
|
-
});
|
|
231
|
-
(0, vitest_1.it)("still reads any tenant's role", async () => {
|
|
232
|
-
const res = await app.inject({ method: "GET", url: `/api/v1/roles/${ROLE_FOREIGN}`, headers: (0, test_helpers_js_1.authHeaders)() });
|
|
233
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
234
|
-
});
|
|
235
|
-
(0, vitest_1.it)("still assigns any role to any key", async () => {
|
|
236
|
-
const res = await app.inject({
|
|
237
|
-
method: "POST",
|
|
238
|
-
url: `/api/v1/roles/assign/${FOREIGN_KEY}`,
|
|
239
|
-
headers: { ...(0, test_helpers_js_1.authHeaders)(), "content-type": "application/json" },
|
|
240
|
-
payload: { role_id: ROLE_FOREIGN },
|
|
241
|
-
});
|
|
242
|
-
(0, vitest_1.expect)(res.statusCode).toBe(200);
|
|
243
|
-
(0, vitest_1.expect)(stratum.assignRoleToKey).toHaveBeenCalledWith(FOREIGN_KEY, ROLE_FOREIGN);
|
|
244
|
-
});
|
|
245
|
-
});
|
|
246
|
-
//# sourceMappingURL=configdiff-roles-scope.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"configdiff-roles-scope.test.js","sourceRoot":"","sources":["../../src/__tests__/configdiff-roles-scope.test.ts"],"names":[],"mappings":";;AAAA,mCAA8D;AAG9D,uDAAiF;AAEjF;;;;;;;;;;;;GAYG;AAEH,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAItD,+EAA+E;AAC/E,MAAM,OAAO,GAAwB;IACnC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;IACjE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;IACnF,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;CAC9D,CAAC;AAEF,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAC5D,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAI3D,MAAM,KAAK,GAA4B;IACrC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE;IACnG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;IAC7G,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;CACzG,CAAC;AAEF,MAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,MAAM,IAAI,GAA6D;IACrE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC/C,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE;CACtD,CAAC;AAEF,IAAI,GAAoB,CAAC;AACzB,IAAI,OAAgB,CAAC;AAErB,SAAS,eAAe;IACrB,OAAO,CAAC,SAAsC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;QACtF,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACF,OAAO,CAAC,UAAuC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3G,OAAO,CAAC,OAAoC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC;IAC1G,mFAAmF;IAClF,OAAO,CAAC,SAAsC,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAiB,EAAE,EAAE;QAC7F,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC;QAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACF,OAAO,CAAC,UAAuC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACpF,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,IAAI;QACjB,GAAG,KAAK;KACT,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,UAAuC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5G,OAAO,CAAC,UAAuC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,eAA4C,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,iBAA8C,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,SAAsC,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC;AAC7G,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,OAAe,EAAE,OAAe;IAClD,OAAO,GAAG,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,gCAAgC,OAAO,aAAa,OAAO,EAAE;QAClE,OAAO,EAAE,IAAA,6BAAW,GAAE;KACvB,CAAC,CAAC;AACL,CAAC;AAED,IAAA,iBAAQ,EAAC,kEAAkE,EAAE,GAAG,EAAE;IAChF,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAA,mCAAiB,GAAE,CAAC;QAC7B,OAAO,CAAC,cAA2C,CAAC,iBAAiB,CAAC;YACrE,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;YAClC,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAA,mCAAiB,GAAE,CAAC;QAC7B,OAAO,CAAC,cAA2C,CAAC,iBAAiB,CAAC;YACrE,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;YAClC,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,IAAA,6BAAW,GAAE,EAAE,CAAC,CAAC;QAC9F,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,GAAG,GAAI,GAAG,CAAC,IAAI,EAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,2BAA2B,MAAM,EAAE;YACxC,OAAO,EAAE,IAAA,6BAAW,GAAE;SACvB,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,YAAY,EAAE,EAAE,OAAO,EAAE,IAAA,6BAAW,GAAE,EAAE,CAAC,CAAC;QAC9G,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAA,6BAAW,GAAE,EAAE,CAAC,CAAC;QAC1G,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,iBAAiB,YAAY,EAAE;YACpC,OAAO,EAAE,EAAE,GAAG,IAAA,6BAAW,GAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAC9B,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,iBAAiB,YAAY,EAAE,EAAE,OAAO,EAAE,IAAA,6BAAW,GAAE,EAAE,CAAC,CAAC;QACjH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,eAAe;YACpB,OAAO,EAAE,EAAE,GAAG,IAAA,6BAAW,GAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;SAClE,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,wBAAwB,OAAO,EAAE;YACtC,OAAO,EAAE,EAAE,GAAG,IAAA,6BAAW,GAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjE,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;SACnC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,wBAAwB,WAAW,EAAE;YAC1C,OAAO,EAAE,EAAE,GAAG,IAAA,6BAAW,GAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;SAC/B,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE,wBAAwB,WAAW,EAAE;YAC1C,OAAO,EAAE,IAAA,6BAAW,GAAE;SACvB,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,wBAAwB,OAAO,EAAE;YACtC,OAAO,EAAE,EAAE,GAAG,IAAA,6BAAW,GAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;SAC/B,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAA,mBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAA,mCAAiB,GAAE,CAAC;QAC7B,OAAO,CAAC,cAA2C,CAAC,iBAAiB,CAAC;YACrE,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;YAClC,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,IAAA,6BAAW,GAAE,EAAE,CAAC,CAAC;QAC9F,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAE,GAAG,CAAC,IAAI,EAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,YAAY,EAAE,EAAE,OAAO,EAAE,IAAA,6BAAW,GAAE,EAAE,CAAC,CAAC;QAC9G,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,wBAAwB,WAAW,EAAE;YAC1C,OAAO,EAAE,EAAE,GAAG,IAAA,6BAAW,GAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjE,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;SACnC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,OAAO,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"default-deny.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/default-deny.test.ts"],"names":[],"mappings":""}
|