using System.Net.Mime; using System.Security.Claims; using System.Text; using System.Text.Encodings.Web; using System.Text.Json; using Bit.Core.Services; using Bit.Infrastructure.EntityFramework.AdminConsole.Models; using Bit.Infrastructure.EntityFramework.Repositories; using Bit.IntegrationTestCommon.Factories; using Bit.Scim.Models; using Microsoft.AspNetCore.Authentication; using Microsoft.AspNetCore.Mvc.Testing; using Microsoft.AspNetCore.TestHost; using Microsoft.Extensions.Options; using Microsoft.Net.Http.Headers; namespace Bit.Scim.IntegrationTest.Factories; public class ScimApplicationFactory : WebApplicationFactoryBase { public readonly new TestServer Server; public static readonly Guid TestUserId1 = Guid.Parse("2e8173db-8e8d-4de1-ac38-91b15c6d8dcb"); public static readonly Guid TestUserId2 = Guid.Parse("b57846fc-0e94-4c93-9de5-9d0389eeadfb"); public static readonly Guid TestUserId3 = Guid.Parse("20713eb8-d0c5-4655-b855-1a0f3472ccb5"); public static readonly Guid TestUserId4 = Guid.Parse("cee613af-d0cb-4db9-ab9d-579bb120fd2a"); public static readonly Guid TestGroupId1 = Guid.Parse("dcb232e8-761d-4152-a510-be2778d037cb"); public static readonly Guid TestGroupId2 = Guid.Parse("562e5371-7020-40b6-b092-099ac66dbdf9"); public static readonly Guid TestGroupId3 = Guid.Parse("362c2782-0f1f-4c86-95dd-edbdf7d6040b"); public static readonly Guid TestOrganizationId1 = Guid.Parse("fb98e04f-0303-4914-9b37-a983943bf1ca"); public static readonly Guid TestOrganizationUserId1 = Guid.Parse("5d421196-8c59-485b-8926-2d6d0101e05f"); public static readonly Guid TestOrganizationUserId2 = Guid.Parse("3a63d520-0d84-4679-b887-13fe2058d53b"); public static readonly Guid TestOrganizationUserId3 = Guid.Parse("be2f9045-e2b6-4173-ad44-4c69c3ea8140"); public static readonly Guid TestOrganizationUserId4 = Guid.Parse("1f5689b7-e96e-4840-b0b1-eb3d5b5fd514"); public ScimApplicationFactory() { WebApplicationFactory webApplicationFactory = WithWebHostBuilder(builder => { builder.ConfigureServices(services => { services .AddAuthentication("Test") .AddScheme("Test", options => { }); // Override to bypass SCIM authorization services.AddAuthorization(config => { config.AddPolicy("Scim", policy => { policy.RequireAssertion(a => true); }); }); var mailService = services.First(sd => sd.ServiceType == typeof(IMailService)); services.Remove(mailService); services.AddSingleton(); }); }); Server = webApplicationFactory.Server; } public async Task GroupsGetAsync(Guid organizationId, Guid id) { return await Server.GetAsync($"/v2/{organizationId}/groups/{id}"); } public async Task GroupsGetListAsync(Guid organizationId, string filter, int? count, int? startIndex) { var queryString = new QueryString("?"); if (!string.IsNullOrWhiteSpace(filter)) { queryString = queryString.Add("filter", filter); } if (count.HasValue) { queryString = queryString.Add("count", count.ToString()); } if (startIndex.HasValue) { queryString = queryString.Add("startIndex", startIndex.ToString()); } return await Server.GetAsync($"/v2/{organizationId}/groups", httpContext => httpContext.Request.QueryString = queryString); } public async Task GroupsPostAsync(Guid organizationId, ScimGroupRequestModel model) { return await Server.PostAsync($"/v2/{organizationId}/groups", GetStringContent(model), httpContext => httpContext.Request.Headers.Add(HeaderNames.UserAgent, "Okta")); } public async Task GroupsPutAsync(Guid organizationId, Guid id, ScimGroupRequestModel model) { return await Server.PutAsync($"/v2/{organizationId}/groups/{id}", GetStringContent(model), httpContext => httpContext.Request.Headers.Add(HeaderNames.UserAgent, "Okta")); } public async Task GroupsPatchAsync(Guid organizationId, Guid id, ScimPatchModel model) { return await Server.PatchAsync($"/v2/{organizationId}/groups/{id}", GetStringContent(model)); } public async Task GroupsDeleteAsync(Guid organizationId, Guid id) { return await Server.DeleteAsync($"/v2/{organizationId}/groups/{id}", null); } public async Task UsersGetAsync(Guid organizationId, Guid id) { return await Server.GetAsync($"/v2/{organizationId}/users/{id}"); } public async Task UsersGetListAsync(Guid organizationId, string filter, int? count, int? startIndex) { var queryString = new QueryString("?"); if (!string.IsNullOrWhiteSpace(filter)) { queryString = queryString.Add("filter", filter); } if (count.HasValue) { queryString = queryString.Add("count", count.ToString()); } if (startIndex.HasValue) { queryString = queryString.Add("startIndex", startIndex.ToString()); } return await Server.GetAsync($"/v2/{organizationId}/users", httpContext => httpContext.Request.QueryString = queryString); } public async Task UsersPostAsync(Guid organizationId, ScimUserRequestModel model) { return await Server.PostAsync($"/v2/{organizationId}/users", GetStringContent(model)); } public async Task UsersPutAsync(Guid organizationId, Guid id, ScimUserRequestModel model) { return await Server.PutAsync($"/v2/{organizationId}/users/{id}", GetStringContent(model)); } public async Task UsersPatchAsync(Guid organizationId, Guid id, ScimPatchModel model) { return await Server.PatchAsync($"/v2/{organizationId}/users/{id}", GetStringContent(model)); } public async Task UsersDeleteAsync(Guid organizationId, Guid id, ScimUserRequestModel model) { return await Server.DeleteAsync($"/v2/{organizationId}/users/{id}", GetStringContent(model)); } public void InitializeDbForTests(DatabaseContext databaseContext) { databaseContext.Organizations.AddRange(GetSeedingOrganizations()); databaseContext.Groups.AddRange(GetSeedingGroups()); databaseContext.Users.AddRange(GetSeedingUsers()); databaseContext.OrganizationUsers.AddRange(GetSeedingOrganizationUsers()); databaseContext.GroupUsers.AddRange(GetSeedingGroupUsers()); databaseContext.SaveChanges(); } public void ReinitializeDbForTests(DatabaseContext databaseContext) { databaseContext.Organizations.RemoveRange(databaseContext.Organizations); databaseContext.Groups.RemoveRange(databaseContext.Groups); databaseContext.Users.RemoveRange(databaseContext.Users); databaseContext.OrganizationUsers.RemoveRange(databaseContext.OrganizationUsers); databaseContext.GroupUsers.RemoveRange(databaseContext.GroupUsers); databaseContext.SaveChanges(); InitializeDbForTests(databaseContext); } private List GetSeedingUsers() { return new List() { new Infrastructure.EntityFramework.Models.User { Id = TestUserId1, Name = "Test User 1", ApiKey = "", Email = "user1@example.com", SecurityStamp = "" }, new Infrastructure.EntityFramework.Models.User { Id = TestUserId2, Name = "Test User 2", ApiKey = "", Email = "user2@example.com", SecurityStamp = "" }, new Infrastructure.EntityFramework.Models.User { Id = TestUserId3, Name = "Test User 3", ApiKey = "", Email = "user3@example.com", SecurityStamp = "" }, new Infrastructure.EntityFramework.Models.User { Id = TestUserId4, Name = "Test User 4", ApiKey = "", Email = "user4@example.com", SecurityStamp = "" }, }; } private List GetSeedingGroups() { return new List() { new Infrastructure.EntityFramework.Models.Group { Id = TestGroupId1, OrganizationId = TestOrganizationId1, Name = "Test Group 1", ExternalId = "A" }, new Infrastructure.EntityFramework.Models.Group { Id = TestGroupId2, OrganizationId = TestOrganizationId1, Name = "Test Group 2", ExternalId = "B" }, new Infrastructure.EntityFramework.Models.Group { Id = TestGroupId3, OrganizationId = TestOrganizationId1, Name = "Test Group 3", ExternalId = "C" } }; } private List GetSeedingOrganizations() { return new List() { new Organization { Id = TestOrganizationId1, Name = "Test Organization 1", UseGroups = true } }; } private List GetSeedingOrganizationUsers() { return new List() { new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId1, OrganizationId = TestOrganizationId1, UserId = TestUserId1, Status = Core.Enums.OrganizationUserStatusType.Confirmed, ExternalId = "UA", Email = "user1@example.com" }, new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId2, OrganizationId = TestOrganizationId1, UserId = TestUserId2, Status = Core.Enums.OrganizationUserStatusType.Confirmed, ExternalId = "UB", Email = "user2@example.com" }, new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId3, OrganizationId = TestOrganizationId1, UserId = TestUserId3, Status = Core.Enums.OrganizationUserStatusType.Revoked, ExternalId = "UC", Email = "user3@example.com" }, new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId4, OrganizationId = TestOrganizationId1, UserId = TestUserId4, Status = Core.Enums.OrganizationUserStatusType.Confirmed, ExternalId = "UD", Email = "user4@example.com" }, }; } private List GetSeedingGroupUsers() { return new List() { new Infrastructure.EntityFramework.Models.GroupUser { GroupId = TestGroupId1, OrganizationUserId = TestOrganizationUserId1 }, new Infrastructure.EntityFramework.Models.GroupUser { GroupId = TestGroupId1, OrganizationUserId = TestOrganizationUserId4 } }; } private static StringContent GetStringContent(object obj) => new(JsonSerializer.Serialize(obj), Encoding.Default, MediaTypeNames.Application.Json); public class TestAuthHandler : AuthenticationHandler { public TestAuthHandler(IOptionsMonitor options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) : base(options, logger, encoder, clock) { } protected override Task HandleAuthenticateAsync() { var claims = new[] { new Claim(ClaimTypes.Name, "Test user"), new Claim("orgadmin", TestOrganizationId1.ToString()) }; var identity = new ClaimsIdentity(claims, "Test"); var principal = new ClaimsPrincipal(identity); var ticket = new AuthenticationTicket(principal, "Test"); var result = AuthenticateResult.Success(ticket); return Task.FromResult(result); } } }