sefrone-api-e2e 1.3.1__tar.gz → 1.3.3__tar.gz

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sefrone_api_e2e
-Version: 1.3.1
+Version: 1.3.3
 Summary: A Python package to provide e2e testing helpers for sefrone API projects
 Home-page: https://bitbucket.org/sefrone/sefrone_pypi
 Author: Sefrone

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/sefrone_api_e2e/e2e/Scenarios/Auth/1_normal_auth_flow.yaml

@@ -38,7 +38,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           username: string
           linkedWorkspaces:
@@ -63,32 +62,6 @@ steps:
       - "{{body.response.username}} == 'admin'"
       - "{{body.response.isActive}} == True"
       - "{{body.response.accountType}} == 'root'"
-      - "{{body.response.credentialType}} == 'standard'"
-
-  - name: "Get user permissions"
-    method: "GET"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/permission/{$stored.login_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.login_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-        response:
-          accountId: string
-          projectId: string
-          permissions:
-            Projects: string
-            Workspaces: string
-            ListWorkspaces: string
-            Accounts: string
-            ApiKeys: string
-            AuthStats: string
-            AccountState: string
-            ChangeAccountPermissions: string
-            ChangeAccountCredentials: string
 
   - name: "Create guest account"
     skip_if:
@@ -106,7 +79,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           username: string
           linkedWorkspaces: []
@@ -117,7 +89,6 @@ steps:
       guest_account_id: "{{body.response.accountId}}"
     assertions:
       - "{{body.response.accountType}} == 'guest'"
-      - "{{body.response.credentialType}} == 'guest'"
       - "{{body.response.isActive}} == True"
       - "{{body.response.username}} include 'Guest_'"
       - "{{body.response.linkedWorkspaces.count()}} == 0"
@@ -140,7 +111,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           username: string
           linkedWorkspaces: []
@@ -169,7 +139,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           username: string
           linkedWorkspaces:
@@ -183,7 +152,6 @@ steps:
       workspace_guest_account_id: "{{body.response.accountId}}"
     assertions:
       - "{{body.response.accountType}} == 'guest'"
-      - "{{body.response.credentialType}} == 'guest'"
       - "{{body.response.linkedWorkspaces.count()}} == 1"
       - "{{body.response.linkedWorkspaces[0].workspaceName}} == '$var(DEFAULT_WORKSPACE_NAME)'"
 
@@ -206,7 +174,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           username: string
           linkedWorkspaces:

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/sefrone_api_e2e/e2e/Scenarios/Auth/2_account_endpoints.yaml

@@ -28,7 +28,7 @@ steps:
     skip_if:
       - "'$var(DEFAULT_WORKSPACE_NAME)' == ''"
     method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/workspace/$var(DEFAULT_WORKSPACE_NAME)/create"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/workspace/$var(DEFAULT_WORKSPACE_NAME)/create?accountType=standard"
     request_headers:
       - x-api-token: "{$stored.admin_token}"
     send_as: "json"
@@ -46,7 +46,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           username: string
           linkedWorkspaces:
@@ -58,7 +57,6 @@ steps:
       managed_account_username: "{{body.response.username}}"
     assertions:
       - "{{body.response.accountType}} == 'standard'"
-      - "{{body.response.credentialType}} == 'standard'"
       - "{{body.response.isActive}} == True"
       - "{{body.response.linkedWorkspaces.count()}} == 1"
       - "{{body.response.linkedWorkspaces[0].workspaceName}} == '$var(DEFAULT_WORKSPACE_NAME)'"

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/sefrone_api_e2e/e2e/Scenarios/Auth/3_admin_account_endpoints.yaml

@@ -1,310 +1,509 @@
-name: "Root Account Endpoints Flow"
-base_url: "http://localhost:$var(API_PUBLIC_PORT)"
-steps:
-  - name: "Login root admin"
-    retry:
-      attempts: 10
-      delay_seconds: 5
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
-    send_as: "json"
-    body:
-      device: "e2e_test_device"
-      pseudo: "$var(DEFAULT_USERNAME)"
-      password: "$var(DEFAULT_PASSWORD)"
-    expect:
-      status: 200
-      body:
-        response:
-          token: string
-    save:
-      root_admin_token: "{{body.response.token}}"
-
-  - name: "Generate unique test suffix"
-    randomize:
-      seed_account_id: 8
-
-  - name: "Root create managed standard account"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      username: "e2e_admin_managed_{$stored.seed_account_id}"
-      password: "e2e_admin_pwd_v1"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-        response:
-          accountId: string
-          projectId: string
-          project: string
-          accountType: string
-          credentialType: string
-          isActive: boolean
-          username: string
-          linkedWorkspaces: []
-    save:
-      admin_managed_account_id: "{{body.response.accountId}}"
-      admin_managed_account_username: "{{body.response.username}}"
-    assertions:
-      - "{{body.response.accountType}} == 'standard'"
-      - "{{body.response.credentialType}} == 'standard'"
-      - "{{body.response.linkedWorkspaces.count()}} == 0"
-
-  - name: "Root list accounts"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/list"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      begin: 0
-      count: 10
-      excludeCaller: true
-      accountTypes:
-        - "standard"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-        totalCount: number
-        pageCount: number
-        nextIndex: number
-        currentIndex: number
-        response: []
-
-  - name: "Root update managed account"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/update/{$stored.admin_managed_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      username: "e2e_admin_updated_{$stored.seed_account_id}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root set managed account credentials"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/credentials/{$stored.admin_managed_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      password: "e2e_admin_pwd_v2"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root set managed account inactive"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/activationState/{$stored.admin_managed_account_id}?isActive=false"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root set managed account active"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/activationState/{$stored.admin_managed_account_id}?isActive=true"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root add workspace link"
-    skip_if:
-      - "'$var(DEFAULT_WORKSPACE_NAME)' == ''"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/workspace/$var(DEFAULT_WORKSPACE_NAME)/link/{$stored.admin_managed_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root remove workspace link"
-    skip_if:
-      - "'$var(DEFAULT_WORKSPACE_NAME)' == ''"
-    method: "DELETE"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/workspace/$var(DEFAULT_WORKSPACE_NAME)/link/{$stored.admin_managed_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root create limited admin account"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=admin"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      username: "e2e_limited_admin_{$stored.seed_account_id}"
-      password: "e2e_limited_admin_pwd_v1"
-    expect:
-      status: 200
-      body:
-        response:
-          accountId: string
-          accountType: string
-          credentialType: string
-    save:
-      limited_admin_account_id: "{{body.response.accountId}}"
-    assertions:
-      - "{{body.response.accountType}} == 'admin'"
-      - "{{body.response.credentialType}} == 'standard'"
-
-  - name: "Login limited admin"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
-    send_as: "json"
-    body:
-      device: "e2e_test_device"
-      pseudo: "e2e_limited_admin_{$stored.seed_account_id}"
-      password: "e2e_limited_admin_pwd_v1"
-    expect:
-      status: 200
-      body:
-        response:
-          token: string
-    save:
-      limited_admin_token: "{{body.response.token}}"
-
-  - name: "Limited admin cannot access admin list endpoint without projects permission"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/list"
-    request_headers:
-      - x-api-token: "{$stored.limited_admin_token}"
-    send_as: "json"
-    body:
-      begin: 0
-      count: 10
-      excludeCaller: true
-      accountTypes:
-        - "standard"
-    expect:
-      status: 403
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Limited admin cannot access admin create endpoint without projects permission"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create"
-    request_headers:
-      - x-api-token: "{$stored.limited_admin_token}"
-    send_as: "json"
-    body:
-      username: "e2e_forbidden_{$stored.seed_account_id}"
-      password: "e2e_forbidden_pwd"
-    expect:
-      status: 403
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root cannot create another root account via API"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=root"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      username: "e2e_forbidden_root_{$stored.seed_account_id}"
-      password: "e2e_forbidden_root_pwd"
-    expect:
-      status: 400
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root account type is excluded from account list results"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/list"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    send_as: "json"
-    body:
-      begin: 0
-      count: 10
-      excludeCaller: false
-      accountTypes:
-        - "root"
-    expect:
-      status: 400
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root admin deletes limited admin account"
-    method: "DELETE"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.limited_admin_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Root admin deletes managed account"
-    method: "DELETE"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.admin_managed_account_id}"
-    request_headers:
-      - x-api-token: "{$stored.root_admin_token}"
-    expect:
-      status: 200
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
-
-  - name: "Deleted managed account cannot login"
-    method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
-    send_as: "json"
-    body:
-      device: "e2e_test_device"
-      pseudo: "e2e_admin_updated_{$stored.seed_account_id}"
-      password: "e2e_admin_pwd_v2"
-    expect:
-      status: 401
-      body:
-        errorCode: number
-        errorCodeStr: string
-        message: string
+name: "Root Account Endpoints Flow"
+base_url: "http://localhost:$var(API_PUBLIC_PORT)"
+steps:
+  - name: "Login root admin"
+    retry:
+      attempts: 10
+      delay_seconds: 5
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "$var(DEFAULT_USERNAME)"
+      password: "$var(DEFAULT_PASSWORD)"
+    expect:
+      status: 200
+      body:
+        response:
+          accountId: string
+          accountType: string
+          token: string
+    save:
+      root_admin_token: "{{body.response.token}}"
+      root_admin_account_id: "{{body.response.accountId}}"
+    assertions:
+      - "{{body.response.accountType}} == 'root'"
+
+  - name: "Generate unique test suffix"
+    randomize:
+      seed_account_id: 8
+
+  - name: "Root fetches own target account types"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/own/targets"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        response:
+          targetAccountTypes: []
+    assertions:
+      - "{{body.response.targetAccountTypes}} include 'standard'"
+      - "{{body.response.targetAccountTypes}} include 'admin'"
+
+  - name: "Root create managed standard account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=standard"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_admin_managed_{$stored.seed_account_id}"
+      password: "e2e_admin_pwd_v1"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        response:
+          accountId: string
+          projectId: string
+          project: string
+          accountType: string
+          isActive: boolean
+          username: string
+          linkedWorkspaces: []
+    save:
+      admin_managed_account_id: "{{body.response.accountId}}"
+      admin_managed_account_username: "{{body.response.username}}"
+    assertions:
+      - "{{body.response.accountType}} == 'standard'"
+      - "{{body.response.linkedWorkspaces.count()}} == 0"
+
+  - name: "Root list accounts"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/list"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      begin: 0
+      count: 10
+      excludeCaller: true
+      accountTypes:
+        - "standard"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        totalCount: number
+        pageCount: number
+        nextIndex: number
+        currentIndex: number
+        response: []
+
+  - name: "Root update managed account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/update/{$stored.admin_managed_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_admin_updated_{$stored.seed_account_id}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root set managed account credentials"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/credentials/{$stored.admin_managed_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      password: "e2e_admin_pwd_v2"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root set managed account inactive"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/activationState/{$stored.admin_managed_account_id}?isActive=false"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root set managed account active"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/activationState/{$stored.admin_managed_account_id}?isActive=true"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root add workspace link"
+    skip_if:
+      - "'$var(DEFAULT_WORKSPACE_NAME)' == ''"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/workspace/$var(DEFAULT_WORKSPACE_NAME)/link/{$stored.admin_managed_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root remove workspace link"
+    skip_if:
+      - "'$var(DEFAULT_WORKSPACE_NAME)' == ''"
+    method: "DELETE"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/workspace/$var(DEFAULT_WORKSPACE_NAME)/link/{$stored.admin_managed_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root create limited admin account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=admin"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_limited_admin_{$stored.seed_account_id}"
+      password: "e2e_limited_admin_pwd_v1"
+    expect:
+      status: 200
+      body:
+        response:
+          accountId: string
+          accountType: string
+    save:
+      limited_admin_account_id: "{{body.response.accountId}}"
+    assertions:
+      - "{{body.response.accountType}} == 'admin'"
+
+  - name: "Root create second admin account for permission constraint checks"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=admin"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_second_admin_{$stored.seed_account_id}"
+      password: "e2e_second_admin_pwd_v1"
+    expect:
+      status: 200
+      body:
+        response:
+          accountId: string
+          accountType: string
+    save:
+      second_admin_account_id: "{{body.response.accountId}}"
+    assertions:
+      - "{{body.response.accountType}} == 'admin'"
+
+  - name: "Login limited admin"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "e2e_limited_admin_{$stored.seed_account_id}"
+      password: "e2e_limited_admin_pwd_v1"
+    expect:
+      status: 200
+      body:
+        response:
+          token: string
+    save:
+      limited_admin_token: "{{body.response.token}}"
+
+  - name: "Limited admin fetches own target account types"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/own/targets"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        response:
+          targetAccountTypes: []
+    assertions:
+      - "{{body.response.targetAccountTypes}} include 'standard'"
+
+  - name: "Limited admin can list accounts using accounts permission alone"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/list"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    send_as: "json"
+    body:
+      begin: 0
+      count: 10
+      excludeCaller: true
+      accountTypes:
+        - "standard"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        totalCount: number
+        pageCount: number
+        nextIndex: number
+        currentIndex: number
+        response: []
+
+  - name: "Limited admin can create standard accounts using accounts permission alone"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=standard"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_by_admin_{$stored.seed_account_id}"
+      password: "e2e_by_admin_pwd_v1"
+    expect:
+      status: 200
+      body:
+        response:
+          accountId: string
+          accountType: string
+    save:
+      account_created_by_limited_admin_id: "{{body.response.accountId}}"
+    assertions:
+      - "{{body.response.accountType}} == 'standard'"
+
+  - name: "Admin account cannot create another admin account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=admin"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_admin_forbidden_{$stored.seed_account_id}"
+      password: "e2e_admin_forbidden_pwd"
+    expect:
+      status: 400
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Admin account cannot create a root account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=root"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_root_forbidden_{$stored.seed_account_id}"
+      password: "e2e_root_forbidden_pwd"
+    expect:
+      status: 400
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root cannot create another root account via API"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=root"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_forbidden_root_{$stored.seed_account_id}"
+      password: "e2e_forbidden_root_pwd"
+    expect:
+      status: 400
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root account can create an admin account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=admin"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      username: "e2e_third_admin_{$stored.seed_account_id}"
+      password: "e2e_third_admin_pwd_v1"
+    expect:
+      status: 200
+      body:
+        response:
+          accountId: string
+          accountType: string
+    save:
+      third_admin_account_id: "{{body.response.accountId}}"
+    assertions:
+      - "{{body.response.accountType}} == 'admin'"
+
+  - name: "Root account type is excluded from account list results"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/list"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      begin: 0
+      count: 10
+      excludeCaller: false
+      accountTypes:
+        - "root"
+    expect:
+      status: 400
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root can set permissions for an admin account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/permission/{$stored.second_admin_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      permissions:
+        accounts: "R"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Admin account cannot set permissions for another admin account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/permission/{$stored.second_admin_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    send_as: "json"
+    body:
+      permissions:
+        accounts: "CRUD"
+    expect:
+      status: 403
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Admin account cannot set permissions for the root account"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/permission/{$stored.root_admin_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.limited_admin_token}"
+    send_as: "json"
+    body:
+      permissions:
+        accounts: "CRUD"
+    expect:
+      status: 403
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root admin deletes account created by limited admin"
+    method: "DELETE"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.account_created_by_limited_admin_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root admin deletes limited admin account"
+    method: "DELETE"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.limited_admin_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root admin deletes second admin account"
+    method: "DELETE"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.second_admin_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root admin deletes third admin account"
+    method: "DELETE"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.third_admin_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Root admin deletes managed account"
+    method: "DELETE"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/delete/{$stored.admin_managed_account_id}"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Deleted managed account cannot login"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "e2e_admin_updated_{$stored.seed_account_id}"
+      password: "e2e_admin_pwd_v2"
+    expect:
+      status: 401
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/sefrone_api_e2e/e2e/Scenarios/Auth/4_workspace_endpoints.yaml

@@ -179,7 +179,7 @@ steps:
 
   - name: "Register standard test account"
     method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create?accountType=standard"
     request_headers:
       - x-api-token: "{$stored.admin_token}"
     send_as: "json"

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/sefrone_api_e2e/e2e/Scenarios/Auth/5_apikey_endpoints.yaml

@@ -47,7 +47,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           apiKey: string
           apiKeyAlias: string
@@ -56,7 +55,6 @@ steps:
       ws_apikey_value: "{{body.response.apiKey}}"
     assertions:
       - "{{body.response.accountType}} == 'api_key'"
-      - "{{body.response.credentialType}} == 'api_key'"
       - "{{body.response.apiKeyAlias}} == 'e2e_apikey_workspace_{$stored.seed_account_id}'"
 
   - name: "List API keys by workspace"
@@ -102,7 +100,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           apiKey: string
           apiKeyAlias: string
@@ -129,7 +126,6 @@ steps:
           projectId: string
           project: string
           accountType: string
-          credentialType: string
           isActive: boolean
           apiKey: string
           apiKeyAlias: string
@@ -138,7 +134,6 @@ steps:
       project_apikey_value: "{{body.response.apiKey}}"
     assertions:
       - "{{body.response.accountType}} == 'api_key'"
-      - "{{body.response.credentialType}} == 'api_key'"
       - "{{body.response.apiKeyAlias}} == 'e2e_apikey_project_{$stored.seed_account_id}'"
 
   - name: "Update API key"

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/sefrone_api_e2e.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sefrone_api_e2e
-Version: 1.3.1
+Version: 1.3.3
 Summary: A Python package to provide e2e testing helpers for sefrone API projects
 Home-page: https://bitbucket.org/sefrone/sefrone_pypi
 Author: Sefrone

{sefrone_api_e2e-1.3.1 → sefrone_api_e2e-1.3.3}/setup.py

@@ -5,7 +5,7 @@ with open("README.md", "r", encoding="utf-8") as fh:
 
 setup(
     name="sefrone_api_e2e",
-    version="1.3.1",
+    version="1.3.3",
     author="Sefrone",
     author_email="contact@sefrone.com",
     description="A Python package to provide e2e testing helpers for sefrone API projects",