using Microsoft.Extensions.DependencyInjection; using MongoDB.Entities; using PrivaPub.ClientModels; using PrivaPub.Infrastructure.Cli; using PrivaPub.Models.User; using PrivaPub.Tests.Support; using PrivaPub.Tests.Support.Host; using System.Net; namespace PrivaPub.Tests.Infrastructure { [Trait("Category", "Integration")] public sealed class AdminCommandsTests : IAsyncLifetime { PrivaPubHost _host; public async ValueTask InitializeAsync() { Assert.SkipUnless(MongoFixture.Enabled, MongoFixture.Skip); _host = await PrivaPubHost.Shared(); } public ValueTask DisposeAsync() => ValueTask.CompletedTask; static async Task> StoredPolicies(Root root) => (await DB.Default.Find().MatchID(root.Id).ExecuteFirstAsync(TestContext.Current.CancellationToken)).Policies.Order().ToList(); async Task AdminRoute(Root root) { using var client = _host.As(root.Jwt); return (await client.GetAsync("/clientapi/admin/domainblocks/list", TestContext.Current.CancellationToken)).StatusCode; } [Fact] public async Task Promote_makes_an_admin_and_a_moderator() { var root = await _host.SignUp("promote"); Assert.Equal(0, await AdminCommands.Run(new[] { "promote", root.UserName.ToUpperInvariant() }, _host.Services)); Assert.Equal(0, await AdminCommands.Run(new[] { "promote", root.UserName }, _host.Services)); Assert.Equal(new[] { Policies.IsAdmin, Policies.IsModerator, Policies.IsUser }.Order(), await StoredPolicies(root)); } [Fact] public async Task Demote_leaves_a_plain_user() { var root = await _host.SignUp("demote"); Assert.Equal(0, await AdminCommands.Run(new[] { "promote", root.UserName }, _host.Services)); Assert.Equal(0, await AdminCommands.Run(new[] { "demote", root.UserName }, _host.Services)); Assert.Equal(0, await AdminCommands.Run(new[] { "demote", root.UserName }, _host.Services)); Assert.Equal(new[] { Policies.IsUser }, await StoredPolicies(root)); } [Fact] public async Task An_unknown_root_exits_1() { Assert.Equal(1, await AdminCommands.Run(new[] { "promote", $"nobody{Guid.NewGuid():N}" }, _host.Services)); Assert.Equal(1, await AdminCommands.Run(new[] { "demote", $"nobody{Guid.NewGuid():N}" }, _host.Services)); } public static TheoryData Misuses() => new() { Array.Empty(), new[] { "promote" }, new[] { "promote", "a", "b" }, new[] { "delete", "a" }, new[] { "PROMOTE", "a" } }; [Theory] [MemberData(nameof(Misuses))] public async Task Misuse_exits_2(string[] args) { Assert.Equal(2, await AdminCommands.Run(args, _host.Services)); } [Fact] public async Task A_token_follows_its_roots_policies_at_once() { var root = await _host.SignUp("policies"); Assert.Equal(HttpStatusCode.Forbidden, await AdminRoute(root)); Assert.Equal(0, await AdminCommands.Run(new[] { "promote", root.UserName }, _host.Services)); Assert.Equal(HttpStatusCode.OK, await AdminRoute(root)); using (var client = _host.As(root.Jwt)) { var refreshed = await (await client.GetAsync("/clientapi/user/sniff/again", TestContext.Current.CancellationToken)).JsonBody(); Assert.Contains(Policies.IsAdmin, refreshed["policies"]!.AsArray().Select(p => p!.GetValue())); } Assert.Equal(0, await AdminCommands.Run(new[] { "demote", root.UserName }, _host.Services)); Assert.Equal(HttpStatusCode.Forbidden, await AdminRoute(root)); } async Task LogIn(string login, string password) { using var client = _host.Client(); return (await client.PostJson("/clientapi/user/login", new { userName = login, password })).StatusCode; } [Fact] public async Task Create_root_makes_a_login_from_a_password_on_standard_input() { using var scope = _host.Services.CreateScope(); var login = $"made{Guid.NewGuid():N}"[..20]; var output = new StringWriter(); Assert.Equal(0, await AdminCommands.Run(new[] { "create-root", login, "--admin" }, scope.ServiceProvider, new StringReader("Typed-On-Stdin-1\n"), output)); Assert.Equal(1, await AdminCommands.Run(new[] { "create-root", login }, scope.ServiceProvider, new StringReader("Typed-On-Stdin-2\n"), new StringWriter())); Assert.Equal(1, await AdminCommands.Run(new[] { "create-root", $"weak{Guid.NewGuid():N}"[..20] }, scope.ServiceProvider, new StringReader("short\n"), new StringWriter())); Assert.Equal(2, await AdminCommands.Run(new[] { "create-root", login, "--root" }, scope.ServiceProvider, new StringReader("Typed-On-Stdin-3\n"), new StringWriter())); Assert.Equal(HttpStatusCode.OK, await LogIn(login, "Typed-On-Stdin-1")); var stored = await DB.Default.Find().Match(u => u.UserName == login).ExecuteFirstAsync(TestContext.Current.CancellationToken); Assert.Contains(Policies.IsAdmin, stored.Policies); } [Fact] public async Task Smoke_keeps_one_undiscoverable_persona_and_a_new_password_each_run() { using var scope = _host.Services.CreateScope(); var persona = $"smoke{Guid.NewGuid():N}"[..20]; var first = new StringWriter(); var second = new StringWriter(); Assert.Equal(0, await AdminCommands.Run(new[] { "smoke", persona }, scope.ServiceProvider, output: first)); Assert.Equal(0, await AdminCommands.Run(new[] { "smoke", persona }, scope.ServiceProvider, output: second)); var (login, oldPassword) = (first.ToString().Trim().Split(' ')[0], first.ToString().Trim().Split(' ')[1]); var newPassword = second.ToString().Trim().Split(' ')[1]; Assert.Equal(AdminCommands.SmokeLogin, login); Assert.NotEqual(oldPassword, newPassword); Assert.Equal(HttpStatusCode.OK, await LogIn(login, newPassword)); Assert.NotEqual(HttpStatusCode.OK, await LogIn(login, oldPassword)); var avatars = await DB.Default.Find().Match(a => a.UserName == persona).ExecuteAsync(TestContext.Current.CancellationToken); var avatar = Assert.Single(avatars); Assert.False(avatar.Settings.IsDiscoverable); Assert.False(avatar.Settings.IsIndexable); } } }