mirror of
https://github.com/owncloud/ocis.git
synced 2026-10-23 23:29:02 +03:00
40d257726a
* test(ci): run test on k8s deployment * chore: update authapp in config * chore: update storageusers in config * chore: update version and envs * chore: normalize service name
119 lines
5.0 KiB
Gherkin
119 lines
5.0 KiB
Gherkin
Feature: create auth-app token using user-id
|
|
As a user
|
|
I want to create auth-app Tokens using user-id
|
|
So that I can use 3rd party apps
|
|
|
|
Background:
|
|
Given user "Alice" has been created with default attributes
|
|
|
|
@env-config @issue-11063
|
|
Scenario: admin creates auth-app token for another user using user-id
|
|
Given the config "AUTH_APP_ENABLE_IMPERSONATION" has been set to "true" for "auth-app" service
|
|
When user "Admin" creates app token with user-id for user "Alice" with expiration time "72h" using the auth-app API
|
|
Then the HTTP status code should be "200"
|
|
And the JSON data of the response should match
|
|
"""
|
|
{
|
|
"type": "object",
|
|
"required": ["token","expiration_date","created_date","label"],
|
|
"properties": {
|
|
"token": { "pattern": "^[a-zA-Z0-9]{16}$" },
|
|
"label": { "const": "Generated via Impersonation API" }
|
|
}
|
|
}
|
|
"""
|
|
When user "Alice" lists all created tokens using the auth-app API
|
|
Then the HTTP status code should be "200"
|
|
And the JSON data of the response should match
|
|
"""
|
|
{
|
|
"type": "array",
|
|
"minItems": 1,
|
|
"maxItems": 1,
|
|
"items": {
|
|
"oneOf": [
|
|
{
|
|
"type": "object",
|
|
"required": [
|
|
"token",
|
|
"expiration_date",
|
|
"created_date",
|
|
"label"
|
|
],
|
|
"properties": {
|
|
"token": {
|
|
"pattern": "^\\$2a\\$11\\$[A-Za-z0-9./]{53}$"
|
|
},
|
|
"label": {
|
|
"const": "Generated via Impersonation API"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
"""
|
|
|
|
|
|
Scenario: non-admin user tries to create own auth-app token using user-id with impersonation enabled
|
|
Given the config "AUTH_APP_ENABLE_IMPERSONATION" has been set to "true" for "auth-app" service
|
|
When user "Alice" tries to create app token with user-id for user "Alice" with expiration time "72h" using the auth-app API
|
|
Then the HTTP status code should be "403"
|
|
|
|
@env-config @issue-11063
|
|
Scenario: non-admin user tries to creates auth-app token for another user using user-id
|
|
Given the config "AUTH_APP_ENABLE_IMPERSONATION" has been set to "true" for "auth-app" service
|
|
And user "Brian" has been created with default attributes
|
|
When user "Brian" tries to create app token with user-id for user "Alice" with expiration time "72h" using the auth-app API
|
|
Then the HTTP status code should be "403"
|
|
|
|
@issue-11063
|
|
Scenario: non-admin user tries to creates auth-app token for another user using user-id without impersonation enabled
|
|
Given user "Brian" has been created with default attributes
|
|
When user "Brian" tries to create app token with user-id for user "Alice" with expiration time "72h" using the auth-app API
|
|
Then the HTTP status code should be "403"
|
|
And the content in the response should include the following content:
|
|
"""
|
|
impersonation is not allowed
|
|
"""
|
|
|
|
|
|
Scenario: non-admin user tries to create own auth-app token using user-id and without expiry
|
|
When user "Alice" tries to create app token with user-id for user "Alice" with expiration time "" using the auth-app API
|
|
Then the HTTP status code should be "400"
|
|
And the content in the response should include the following content:
|
|
"""
|
|
error parsing expiry. Use e.g. 30m or 72h
|
|
"""
|
|
|
|
@env-config
|
|
Scenario: admin tries to create auth-app token for another user with user-id and without expiry
|
|
Given the config "AUTH_APP_ENABLE_IMPERSONATION" has been set to "true" for "auth-app" service
|
|
When user "Admin" tries to create app token with user-id for user "Alice" with expiration time "" using the auth-app API
|
|
Then the HTTP status code should be "400"
|
|
And the content in the response should include the following content:
|
|
"""
|
|
error parsing expiry. Use e.g. 30m or 72h
|
|
"""
|
|
|
|
|
|
Scenario: non-admin user tries to create auth-app token for another user using user-id and without expiry
|
|
Given the config "AUTH_APP_ENABLE_IMPERSONATION" has been set to "true" for "auth-app" service
|
|
And user "Brian" has been created with default attributes
|
|
When user "Brian" tries to create app token with user-id for user "Alice" with expiration time "" using the auth-app API
|
|
Then the HTTP status code should be "400"
|
|
And the content in the response should include the following content:
|
|
"""
|
|
error parsing expiry. Use e.g. 30m or 72h
|
|
"""
|
|
|
|
|
|
Scenario: non-existent user tries to create auth-app token for another user using user-id and without expiry
|
|
When user "Brian" tries to create app token with user-id for user "Alice" with expiration time "" using the auth-app API
|
|
Then the HTTP status code should be "401"
|
|
|
|
|
|
Scenario: non-existent user tries to create auth-app token for another user using user-id
|
|
When user "Brian" tries to create app token with user-id for user "Alice" with expiration time "72h" using the auth-app API
|
|
Then the HTTP status code should be "401"
|