@toa.io/extensions.exposition 1.0.0-alpha.292 → 1.0.0-alpha.293

package/features/credentials.feature

@@ -1,106 +0,0 @@
-@security
-Feature: Persistent credentials management
-
-  Background:
-    # developer:secret
-    Given the `identity.basic` database contains:
-      | _id                              | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
-    And the `identity.federation` database contains:
-      | _id                              | authority | identity                         | iss                         | sub    | CREATED |
-      | fed3a65ebbee47ed95a73edd911ea328 | nex       | efe3a65ebbee47ed95a73edd911ea328 | https://accounts.google.com | google | 1000    |
-      | fed3a65ebbee47ed95a73edd911ea329 | nex       | efe3a65ebbee47ed95a73edd911ea328 | https://appleid.apple.com   | apple  | 900     |
-    And the `identity.passkeys` database contains:
-      | _id                              | authority | identity                         | kid     | aid                                  | synced | key      | counter | label           | CREATED |
-      | ace3a65ebbee47ed95a73edd911ea328 | nex       | efe3a65ebbee47ed95a73edd911ea328 | key-one | adce0002-35bc-c60a-648b-0b25f1f05503 | true   | cHVibGlj | 0       | Personal iPhone | 2000    |
-
-  Scenario: Listing all persistent credentials
-    When the following request is received:
-      """
-      GET /identity/credentials/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Basic ZGV2ZWxvcGVyOnNlY3JldA==
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      authorization: Token ${{ token }}
-
-      basic:
-        username: developer
-      federation:
-        - id: fed3a65ebbee47ed95a73edd911ea328
-          iss: https://accounts.google.com
-          CREATED: 1000
-        - id: fed3a65ebbee47ed95a73edd911ea329
-          iss: https://appleid.apple.com
-          CREATED: 900
-      passkeys:
-        - id: ace3a65ebbee47ed95a73edd911ea328
-          aid: adce0002-35bc-c60a-648b-0b25f1f05503
-          synced: true
-          label: Personal iPhone
-          CREATED: 2000
-      """
-
-  Scenario: Deleting credentials through their components
-    When the following request is received:
-      """
-      GET /identity/credentials/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Basic ZGV2ZWxvcGVyOnNlY3JldA==
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      authorization: Token ${{ token }}
-      """
-    When the following request is received:
-      """
-      DELETE /identity/basic/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Token ${{ token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-    When the following request is received:
-      """
-      DELETE /identity/federation/efe3a65ebbee47ed95a73edd911ea328/fed3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Token ${{ token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-    When the following request is received:
-      """
-      DELETE /identity/passkeys/efe3a65ebbee47ed95a73edd911ea328/ace3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Token ${{ token }}
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-    When the following request is received:
-      """
-      GET /identity/credentials/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Token ${{ token }}
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      basic: null
-      federation:
-        - id: fed3a65ebbee47ed95a73edd911ea329
-          iss: https://appleid.apple.com
-          CREATED: 900
-      passkeys: []
-      """

package/features/debug.feature

@@ -1,34 +0,0 @@
-Feature: Debugging
-
-  Scenario: Operation call
-    Given the `identity.basic` database contains:
-      | _id                              | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
-    And the `identity.roles` database contains:
-      | _id                              | identity                         | role      |
-      | 775a648d054e4ce1a65f8f17e5b51803 | efe3a65ebbee47ed95a73edd911ea328 | developer |
-    And the annotation:
-      """yaml
-      debug: true
-      """
-    And the `greeter` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          auth:role: developer
-          io:output: true
-          GET: greet
-      """
-    When the following request is received:
-      """
-      GET /greeter/ HTTP/1.1
-      host: nex.toa.io
-      authorization: Basic ZGV2ZWxvcGVyOnNlY3JldA==
-      accept: text/plain
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      Hello
-      """

package/features/dev.feature

@@ -1,90 +0,0 @@
-Feature: Dev
-
-  @timing
-  Scenario: Delays
-    Given the annotation:
-      """yaml
-      /:
-        io:output: true
-        anonymous: true
-        dev:sleep: 3000
-        GET:
-          dev:stub: hello
-        /nested:
-          GET:
-            dev:stub: world
-      """
-    # CORS permission
-    When the following request is received:
-      """
-      OPTIONS / HTTP/1.1
-      access-control-request-method: GET
-      origin: http://example.com
-      """
-    Then the following reply is sent:
-      """
-      204 No Content
-      access-control-allow-headers: accept, authorization, content-type, if-match, if-none-match, sleep
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      sleep: [1000, 2000]
-      """
-    # check the response time
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-    When the following request is received:
-      """
-      GET /nested/ HTTP/1.1
-      sleep: [100, 300]
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      sleep: [1000, 3500]
-      """
-    Then the following reply is sent:
-      """
-      400 Bad Request
-
-      "Invalid sleep duration"
-      """
-
-  Scenario: Faulty mode
-    Given the annotation:
-      """yaml
-      /:
-        io:output: true
-        anonymous: true
-        dev:faulty: 1
-        GET:
-          dev:stub: hello
-      """
-    # CORS permission
-    When the following request is received:
-      """
-      OPTIONS / HTTP/1.1
-      access-control-request-method: GET
-      origin: http://example.com
-      """
-    Then the following reply is sent:
-      """
-      204 No Content
-      access-control-allow-headers: accept, authorization, content-type, faulty, if-match, if-none-match
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      faulty: 1
-      """
-    Then the following reply is sent:
-      """
-      503 Service Unavailable
-      """

package/features/directives.feature

@@ -1,61 +0,0 @@
-Feature: Directives
-
-  Scenario: Basic directive
-    Given the annotation:
-      """yaml
-      /:
-        io:output: true
-        anonymous: true
-        GET:
-          dev:stub:
-            hello: world
-      """
-    When the following request is received:
-      """
-      GET / HTTP/1.1
-      host: nex.toa.io
-      accept: application/json
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: application/json
-
-      {"hello":"world"}
-      """
-
-  Scenario: Nested routes
-    Given the annotation:
-      """yaml
-      /:
-        io:output: true
-        anonymous: true
-        dev:stub:
-          hello: again
-        GET: {}
-        /pots:
-          GET: {}
-      """
-    When the following request is received:
-      """
-      GET /pots/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      content-type: application/yaml
-
-      hello: again
-      """
-    When the following request is received:
-      """
-      GET /pots/non-existent/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      404 Not Found
-      """

package/features/discovery.feature

@@ -1,213 +0,0 @@
-Feature: Resource discovery
-
-  Every route an application serves, at one path, described as `OPTIONS` on each of them
-  describes it.
-
-  Scenario: What an application serves
-    Given the `pots` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: [id, title]
-          GET: enumerate
-          POST: create
-          /:id:
-            GET: observe
-      """
-    When the following request is received:
-      """
-      OPTIONS /.discovery HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      Allow: GET, HEAD, OPTIONS
-      cache-control: private, max-age=1800
-
-      routes:
-        /pots:
-          GET:
-            output:
-              type: array
-              items:
-                properties:
-                  id:
-                    type: string
-                  title:
-                    type: string
-          POST:
-            input:
-              properties:
-                title:
-                  type: string
-        /pots/:id:
-          GET:
-            output:
-              properties:
-                id:
-                  type: string
-      """
-
-  Scenario: A key is a request that can be made
-    What each entry says is what `OPTIONS` on that key says, so a client reads the tree
-    once and addresses any of it by the key it was given.
-
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:a:
-          io:output: true
-          PATCH: parameters
-      """
-    When the following request is received:
-      """
-      OPTIONS /.discovery HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      routes:
-        /echo/:a:
-          PATCH:
-            route:
-              a:
-                type: string
-            input:
-              type: object
-              properties:
-                b:
-                  type: string
-      """
-    When the following request is received:
-      """
-      OPTIONS /echo/:a/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      Allow: PATCH
-
-      PATCH:
-        route:
-          a:
-            type: string
-        input:
-          type: object
-          properties:
-            b:
-              type: string
-      """
-
-  Scenario: A resource this caller may reach no method of is not there
-    `OPTIONS` on one answers `403`, and a tree cannot refuse a single entry — so it is
-    omitted, rather than named as something that exists and is not for them.
-
-    Given the annotation:
-      """yaml
-      /:
-        /open:
-          anonymous: true
-          GET:
-            dev:stub: hello
-        /closed:
-          auth:role: admin
-          GET:
-            dev:stub: secret
-      """
-    When the following request is received:
-      """
-      OPTIONS /.discovery HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      routes:
-        /open:
-          GET:
-            anonymous: true
-      """
-    And the reply does not contain:
-      """
-      /closed:
-      """
-
-  Scenario: Only the verbs this caller may reach
-    A resource is described by what is left of it, not dropped for the part that is not
-    theirs.
-
-    Given the `pots` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          isolated: true
-          io:output: [id, title]
-          GET:
-            anonymous: true
-            endpoint: enumerate
-          POST:
-            auth:role: admin
-            endpoint: create
-      """
-    When the following request is received:
-      """
-      OPTIONS /.discovery HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      routes:
-        /pots:
-          GET:
-      """
-    And the reply does not contain:
-      """
-      temperature
-      """
-
-  Scenario: A credential does not hide what is anonymous
-    A credential refuses an `anonymous` route because it would make the reply uncacheable,
-    and a description is not that reply. Without this an identity would be shown less of
-    the tree than someone presenting nothing at all.
-
-    Given the `identity.basic` database contains:
-      # developer:secret
-      | _id                              | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
-    And the `identity.bans` database is empty
-    And the annotation:
-      """yaml
-      /:
-        /pots:
-          anonymous: true
-          GET:
-            dev:stub: hello
-      """
-    When the following request is received:
-      """
-      OPTIONS /.discovery HTTP/1.1
-      host: nex.toa.io
-      authorization: Basic ZGV2ZWxvcGVyOnNlY3JldA==
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-
-      routes:
-        /pots:
-          GET:
-            anonymous: true
-      """