blob: ff2c03a537f6f99bdec70aba8245b5683bda429c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
using FluentAssertions;
using Microsoft.AspNetCore.Mvc.Testing;
using System;
using System.Net;
using System.Threading.Tasks;
using Timeline.Tests.Helpers;
using Timeline.Tests.Helpers.Authentication;
using Timeline.Tests.Mock.Data;
using Xunit;
namespace Timeline.Tests.IntegratedTests
{
public class UserDetailTest : IClassFixture<WebApplicationFactory<Startup>>, IDisposable
{
private readonly TestApplication _testApp;
private readonly WebApplicationFactory<Startup> _factory;
public UserDetailTest(WebApplicationFactory<Startup> factory)
{
_testApp = new TestApplication(factory);
_factory = _testApp.Factory;
}
public void Dispose()
{
_testApp.Dispose();
}
[Fact]
public async Task PermissionTest()
{
{ // unauthorize
using var client = _factory.CreateDefaultClient();
{ // GET
var res = await client.GetAsync($"users/{MockUser.User.Username}/nickname");
res.Should().HaveStatusCode(HttpStatusCode.OK);
}
{ // PUT
var res = await client.PutStringAsync($"users/{MockUser.User.Username}/nickname", "aaa");
res.Should().HaveStatusCode(HttpStatusCode.Unauthorized);
}
{ // DELETE
var res = await client.DeleteAsync($"users/{MockUser.User.Username}/nickname");
res.Should().HaveStatusCode(HttpStatusCode.Unauthorized);
}
}
{ // user
using var client = await _factory.CreateClientAsUser();
{ // GET
var res = await client.GetAsync($"users/{MockUser.User.Username}/nickname");
res.Should().HaveStatusCode(HttpStatusCode.OK);
}
{ // PUT self
var res = await client.PutStringAsync($"users/{MockUser.User.Username}/nickname", "aaa");
res.Should().HaveStatusCode(HttpStatusCode.OK);
}
{ // PUT other
var res = await client.PutStringAsync($"users/{MockUser.Admin.Username}/nickname", "aaa");
res.Should().HaveStatusCode(HttpStatusCode.Forbidden);
}
{ // DELETE self
var res = await client.DeleteAsync($"users/{MockUser.User.Username}/nickname");
res.Should().HaveStatusCode(HttpStatusCode.OK);
}
{ // DELETE other
var res = await client.DeleteAsync($"users/{MockUser.Admin.Username}/nickname");
res.Should().HaveStatusCode(HttpStatusCode.Forbidden);
}
}
{ // user
using var client = await _factory.CreateClientAsAdmin();
{ // PUT other
var res = await client.PutStringAsync($"users/{MockUser.User.Username}/nickname", "aaa");
res.Should().HaveStatusCode(HttpStatusCode.OK);
}
{ // DELETE other
var res = await client.DeleteAsync($"users/{MockUser.User.Username}/nickname");
res.Should().HaveStatusCode(HttpStatusCode.OK);
}
}
}
}
}
|
