package testing import ( "net/http" "testing" "github.com/SecurityBrewery/catalyst/app/data" ) func TestTicketsCollection(t *testing.T) { t.Parallel() testSets := []catalystTest{ { baseTest: baseTest{ Name: "ListTickets", Method: http.MethodGet, URL: "/api/tickets", }, userTests: []userTest{ { Name: "Unauthorized", ExpectedStatus: http.StatusUnauthorized, ExpectedContent: []string{ `"invalid bearer token"`, }, }, { Name: "Analyst", AuthRecord: data.AnalystEmail, ExpectedStatus: http.StatusOK, ExpectedHeaders: map[string]string{ "X-Total-Count": "1", }, ExpectedEvents: map[string]int{"OnRecordsListRequest": 1}, }, { Name: "Admin", Admin: data.AdminEmail, ExpectedStatus: http.StatusOK, ExpectedHeaders: map[string]string{ "X-Total-Count": "1", }, ExpectedEvents: map[string]int{"OnRecordsListRequest": 1}, }, }, }, { baseTest: baseTest{ Name: "CreateTicket", Method: http.MethodPost, RequestHeaders: map[string]string{"Content-Type": "application/json"}, URL: "/api/tickets", Body: s(map[string]any{ "name": "new", "type": "incident", "description": "test", "open": true, "owner": "u_bob_analyst", "resolution": "", "schema": map[string]any{}, "state": map[string]any{}, }), }, userTests: []userTest{ { Name: "Unauthorized", ExpectedStatus: http.StatusUnauthorized, ExpectedContent: []string{ `"invalid bearer token"`, }, }, { Name: "Analyst", AuthRecord: data.AnalystEmail, ExpectedStatus: http.StatusOK, ExpectedContent: []string{ `"name":"new"`, }, ExpectedEvents: map[string]int{ "OnRecordAfterCreateRequest": 1, "OnRecordBeforeCreateRequest": 1, }, }, { Name: "Admin", Admin: data.AdminEmail, ExpectedStatus: http.StatusOK, ExpectedContent: []string{ `"name":"new"`, }, ExpectedEvents: map[string]int{ "OnRecordAfterCreateRequest": 1, "OnRecordBeforeCreateRequest": 1, }, }, }, }, { baseTest: baseTest{ Name: "GetTicket", Method: http.MethodGet, URL: "/api/tickets/test-ticket", }, userTests: []userTest{ { Name: "Unauthorized", ExpectedStatus: http.StatusUnauthorized, ExpectedContent: []string{ `"invalid bearer token"`, }, }, { Name: "Analyst", AuthRecord: data.AnalystEmail, ExpectedStatus: http.StatusOK, ExpectedContent: []string{ `"id":"test-ticket"`, }, ExpectedEvents: map[string]int{"OnRecordViewRequest": 1}, }, { Name: "Admin", Admin: data.AdminEmail, ExpectedStatus: http.StatusOK, ExpectedContent: []string{ `"id":"test-ticket"`, }, ExpectedEvents: map[string]int{"OnRecordViewRequest": 1}, }, }, }, { baseTest: baseTest{ Name: "UpdateTicket", Method: http.MethodPatch, RequestHeaders: map[string]string{"Content-Type": "application/json"}, URL: "/api/tickets/test-ticket", Body: s(map[string]any{"name": "update"}), }, userTests: []userTest{ { Name: "Unauthorized", ExpectedStatus: http.StatusUnauthorized, ExpectedContent: []string{ `"invalid bearer token"`, }, }, { Name: "Analyst", AuthRecord: data.AnalystEmail, ExpectedStatus: http.StatusOK, ExpectedContent: []string{ `"id":"test-ticket"`, `"name":"update"`, }, ExpectedEvents: map[string]int{ "OnRecordAfterUpdateRequest": 1, "OnRecordBeforeUpdateRequest": 1, }, }, { Name: "Admin", Admin: data.AdminEmail, ExpectedStatus: http.StatusOK, ExpectedContent: []string{ `"id":"test-ticket"`, `"name":"update"`, }, ExpectedEvents: map[string]int{ "OnRecordAfterUpdateRequest": 1, "OnRecordBeforeUpdateRequest": 1, }, }, }, }, { baseTest: baseTest{ Name: "DeleteTicket", Method: http.MethodDelete, URL: "/api/tickets/test-ticket", }, userTests: []userTest{ { Name: "Unauthorized", ExpectedStatus: http.StatusUnauthorized, ExpectedContent: []string{ `"invalid bearer token"`, }, }, { Name: "Analyst", AuthRecord: data.AnalystEmail, ExpectedStatus: http.StatusNoContent, ExpectedEvents: map[string]int{ "OnRecordAfterDeleteRequest": 1, "OnRecordBeforeDeleteRequest": 1, }, }, { Name: "Admin", Admin: data.AdminEmail, ExpectedStatus: http.StatusNoContent, ExpectedEvents: map[string]int{ "OnRecordAfterDeleteRequest": 1, "OnRecordBeforeDeleteRequest": 1, }, }, }, }, } for _, testSet := range testSets { t.Run(testSet.baseTest.Name, func(t *testing.T) { t.Parallel() for _, userTest := range testSet.userTests { t.Run(userTest.Name, func(t *testing.T) { t.Parallel() runMatrixTest(t, testSet.baseTest, userTest) }) } }) } }