@toa.io/extensions.exposition 1.0.0-alpha.292 → 1.0.0-alpha.293

package/features/authorities.feature

@@ -1,71 +0,0 @@
-Feature: Authorities
-
-  Scenario: Accessing an authority
-    Given the annotation:
-      """yaml
-      authorities:
-        example: the.example.com
-      /:
-        anonymous: true
-        GET:
-          dev:stub: Hello
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      host: the.example.com
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-
-    # arbitrary authorities are also allowed
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      host: the.other.com
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-
-  Scenario: Rejecting a malformed authority
-    Given the annotation:
-      """yaml
-      /:
-        anonymous: true
-        GET:
-          dev:stub: Hello
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      host: zzz,identity==abc,authority==q
-      """
-    Then the following reply is sent:
-      """
-      400 Bad Request
-      """
-
-  Scenario: Matching an authority regardless of case
-    Given the annotation:
-      """yaml
-      authorities:
-        example: the.example.com
-      /:
-        anonymous: true
-        GET:
-          map:authority: authority
-          dev:stub: Hello
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      host: The.Example.COM
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """

package/features/authorities.federation.feature

@@ -1,100 +0,0 @@
-Feature: OIDC tokens with authorities
-
-  Background:
-    Given local IDP is running
-    And the `identity.federation` database is empty
-    And the `identity.federation` configuration:
-      """yaml
-      trust:
-        - iss: http://localhost:31005
-          aud: test
-      """
-
-
-  Scenario: OIDC tokens are scoped to authorities
-    Given the annotation:
-      """yaml
-      authorities:
-        one: the.one.com
-      /:
-        /:id:
-          auth:id: id
-          GET:
-            dev:stub: Hello
-      """
-    And the IDP token for One is issued
-    And the IDP token for Two is issued
-
-    # create identities
-    When the following request is received:
-      """
-      GET /identity/ HTTP/1.1
-      host: the.one.com
-      authorization: Bearer ${{ One.id_token }}
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      id: ${{ One.id }}
-      """
-    When the following request is received:
-      """
-      GET /identity/ HTTP/1.1
-      authorization: Bearer ${{ Two.id_token }}
-      host: the.two.com
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      id: ${{ Two.id }}
-      """
-
-    # access `one` authority
-    When the following request is received:
-      """
-      GET /${{ One.id }}/ HTTP/1.1
-      host: the.one.com
-      authorization: Bearer ${{ One.id_token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-
-    # authorization will create new identity within `one` authority
-    When the following request is received:
-      """
-      GET /${{ Two.id }}/ HTTP/1.1
-      host: the.one.com
-      authorization: Bearer ${{ Two.id_token }}
-      """
-    Then the following reply is sent:
-      """
-      403 Forbidden
-      """
-
-    # access `two` authority
-    When the following request is received:
-      """
-      GET /${{ One.id }}/ HTTP/1.1
-      host: the.two.com
-      authorization: Bearer ${{ One.id_token }}
-      """
-    Then the following reply is sent:
-      """
-      403 Forbidden
-      """
-    When the following request is received:
-      """
-      GET /${{ Two.id }}/ HTTP/1.1
-      host: the.two.com
-      authorization: Bearer ${{ Two.id_token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """

package/features/authorities.tokens.feature

@@ -1,117 +0,0 @@
-Feature: Token credentials with authorities
-
-  Scenario: Tokens are scoped to authorities
-    Given the annotation:
-      """yaml
-      authorities:
-        one: the.one.com
-      /:
-        /:id:
-          auth:id: id
-          GET:
-            dev:stub: Hello
-      """
-
-    # create identity within the `one` authority
-    When the following request is received:
-      """
-      POST /identity/basic/ HTTP/1.1
-      host: the.one.com
-      content-type: application/yaml
-      accept: application/yaml
-
-      username: #{{ id | set one.username }}
-      password: '#{{ password 8 | set one.password }}'
-      """
-    Then the following reply is sent:
-      """
-      201 Created
-      """
-    When the following request is received:
-      """
-      GET /identity/ HTTP/1.1
-      host: the.one.com
-      accept: application/yaml
-      authorization: Basic #{{ basic one }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      authorization: Token ${{ one.token }}
-
-      id: ${{ one.id }}
-      """
-
-    # create identity within the `the.two.com` authority
-    When the following request is received:
-      """
-      POST /identity/basic/ HTTP/1.1
-      host: the.two.com
-      content-type: application/yaml
-      accept: application/yaml
-
-      username: #{{ id | set two.username }}
-      password: '#{{ password 8 | set two.password }}'
-      """
-    Then the following reply is sent:
-      """
-      201 Created
-      """
-    When the following request is received:
-      """
-      GET /identity/ HTTP/1.1
-      host: the.two.com
-      accept: application/yaml
-      authorization: Basic #{{ basic two }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      authorization: Token ${{ two.token }}
-
-      id: ${{ two.id }}
-      """
-
-    # access `one` authority
-    When the following request is received:
-      """
-      GET /${{ one.id }}/ HTTP/1.1
-      host: the.one.com
-      authorization: Token ${{ one.token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-    When the following request is received:
-      """
-      GET /${{ two.id }}/ HTTP/1.1
-      host: the.one.com
-      authorization: Token ${{ two.token }}
-      """
-    Then the following reply is sent:
-      """
-      401 Unauthorized
-      """
-
-    # access `two` authority
-    When the following request is received:
-      """
-      GET /${{ one.id }}/ HTTP/1.1
-      host: the.two.com
-      authorization: Token ${{ one.token }}
-      """
-    Then the following reply is sent:
-      """
-      401 Unauthorized
-      """
-    When the following request is received:
-      """
-      GET /${{ two.id }}/ HTTP/1.1
-      host: the.two.com
-      authorization: Token ${{ two.token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """

package/features/body.feature

@@ -1,76 +0,0 @@
-Feature: Request body
-
-  Scenario: Creating an entity
-    Given the `pots` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          POST: create
-      """
-    When the following request is received:
-      """
-      POST /pots/ HTTP/1.1
-      host: nex.toa.io
-      content-type: application/yaml
-
-      title: Hello
-      volume: 1.5
-      """
-    Then the following reply is sent:
-      """
-      201 Created
-      """
-
-  Scenario Outline: Path segment as input for <operation>
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:name:
-          io:output: true
-          GET: <operation>
-      """
-    When the following request is received:
-      """
-      GET /echo/world/ HTTP/1.1
-      host: nex.toa.io
-      accept: text/plain
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: text/plain
-
-      Hello world
-      """
-    Examples:
-      | operation |
-      | compute   |
-      | affect    |
-
-  Scenario: JSON body with charset in content-type
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          POST:
-            endpoint: echo
-      """
-    When the following request is received:
-      """
-      POST /echo/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/json
-      content-type: application/json; charset=utf-8
-
-      {"foo":"bar"}
-      """
-    Then the following reply is sent:
-      """
-      201 Created
-      content-type: application/json
-      vary: accept
-
-      {"foo":"bar"}
-      """