mirror of
https://github.com/bitwarden/server.git
synced 2024-12-12 15:26:48 +01:00
8b5f65fc00
* Enable `nullable` in `ISubscriber` * Enable `nullable` in `Group` * Enable `nullable` in `GroupUser` * Enable `nullable` in `Organization` * Enable `nullable` in `OrganizationUser` * Enable `nullable` in `Policy` * Enable `nullable` in `Provider` * Enable `nullable` in `ProviderOrganization` * Enable `nullable` in `ProviderUser` * Update Tests * Formatting * Update TwoFactor Tests * Fix Scim Tests * Format * Add Migrations * Format
262 lines
12 KiB
C#
262 lines
12 KiB
C#
using System.Net.Mime;
|
|
using System.Security.Claims;
|
|
using System.Text;
|
|
using System.Text.Encodings.Web;
|
|
using System.Text.Json;
|
|
using Bit.Core.Services;
|
|
using Bit.Infrastructure.EntityFramework.AdminConsole.Models;
|
|
using Bit.Infrastructure.EntityFramework.Repositories;
|
|
using Bit.IntegrationTestCommon.Factories;
|
|
using Bit.Scim.Models;
|
|
using Microsoft.AspNetCore.Authentication;
|
|
using Microsoft.AspNetCore.Mvc.Testing;
|
|
using Microsoft.AspNetCore.TestHost;
|
|
using Microsoft.Extensions.Options;
|
|
using Microsoft.Net.Http.Headers;
|
|
|
|
namespace Bit.Scim.IntegrationTest.Factories;
|
|
|
|
public class ScimApplicationFactory : WebApplicationFactoryBase<Startup>
|
|
{
|
|
public readonly new TestServer Server;
|
|
|
|
public static readonly Guid TestUserId1 = Guid.Parse("2e8173db-8e8d-4de1-ac38-91b15c6d8dcb");
|
|
public static readonly Guid TestUserId2 = Guid.Parse("b57846fc-0e94-4c93-9de5-9d0389eeadfb");
|
|
public static readonly Guid TestUserId3 = Guid.Parse("20713eb8-d0c5-4655-b855-1a0f3472ccb5");
|
|
public static readonly Guid TestUserId4 = Guid.Parse("cee613af-d0cb-4db9-ab9d-579bb120fd2a");
|
|
public static readonly Guid TestGroupId1 = Guid.Parse("dcb232e8-761d-4152-a510-be2778d037cb");
|
|
public static readonly Guid TestGroupId2 = Guid.Parse("562e5371-7020-40b6-b092-099ac66dbdf9");
|
|
public static readonly Guid TestGroupId3 = Guid.Parse("362c2782-0f1f-4c86-95dd-edbdf7d6040b");
|
|
public static readonly Guid TestOrganizationId1 = Guid.Parse("fb98e04f-0303-4914-9b37-a983943bf1ca");
|
|
public static readonly Guid TestOrganizationUserId1 = Guid.Parse("5d421196-8c59-485b-8926-2d6d0101e05f");
|
|
public static readonly Guid TestOrganizationUserId2 = Guid.Parse("3a63d520-0d84-4679-b887-13fe2058d53b");
|
|
public static readonly Guid TestOrganizationUserId3 = Guid.Parse("be2f9045-e2b6-4173-ad44-4c69c3ea8140");
|
|
public static readonly Guid TestOrganizationUserId4 = Guid.Parse("1f5689b7-e96e-4840-b0b1-eb3d5b5fd514");
|
|
|
|
public ScimApplicationFactory()
|
|
{
|
|
WebApplicationFactory<Startup> webApplicationFactory = WithWebHostBuilder(builder =>
|
|
{
|
|
builder.ConfigureServices(services =>
|
|
{
|
|
services
|
|
.AddAuthentication("Test")
|
|
.AddScheme<AuthenticationSchemeOptions, TestAuthHandler>("Test", options => { });
|
|
|
|
// Override to bypass SCIM authorization
|
|
services.AddAuthorization(config =>
|
|
{
|
|
config.AddPolicy("Scim", policy =>
|
|
{
|
|
policy.RequireAssertion(a => true);
|
|
});
|
|
});
|
|
|
|
var mailService = services.First(sd => sd.ServiceType == typeof(IMailService));
|
|
services.Remove(mailService);
|
|
services.AddSingleton<IMailService, NoopMailService>();
|
|
});
|
|
});
|
|
|
|
Server = webApplicationFactory.Server;
|
|
}
|
|
|
|
public async Task<HttpContext> GroupsGetAsync(Guid organizationId, Guid id)
|
|
{
|
|
return await Server.GetAsync($"/v2/{organizationId}/groups/{id}");
|
|
}
|
|
|
|
public async Task<HttpContext> GroupsGetListAsync(Guid organizationId, string filter, int? count, int? startIndex)
|
|
{
|
|
var queryString = new QueryString("?");
|
|
|
|
if (!string.IsNullOrWhiteSpace(filter))
|
|
{
|
|
queryString = queryString.Add("filter", filter);
|
|
}
|
|
|
|
if (count.HasValue)
|
|
{
|
|
queryString = queryString.Add("count", count.ToString());
|
|
}
|
|
|
|
if (startIndex.HasValue)
|
|
{
|
|
queryString = queryString.Add("startIndex", startIndex.ToString());
|
|
}
|
|
|
|
return await Server.GetAsync($"/v2/{organizationId}/groups", httpContext => httpContext.Request.QueryString = queryString);
|
|
}
|
|
|
|
public async Task<HttpContext> GroupsPostAsync(Guid organizationId, ScimGroupRequestModel model)
|
|
{
|
|
return await Server.PostAsync($"/v2/{organizationId}/groups", GetStringContent(model), httpContext => httpContext.Request.Headers.Append(HeaderNames.UserAgent, "Okta"));
|
|
}
|
|
|
|
public async Task<HttpContext> GroupsPutAsync(Guid organizationId, Guid id, ScimGroupRequestModel model)
|
|
{
|
|
return await Server.PutAsync($"/v2/{organizationId}/groups/{id}", GetStringContent(model), httpContext => httpContext.Request.Headers.Append(HeaderNames.UserAgent, "Okta"));
|
|
}
|
|
|
|
public async Task<HttpContext> GroupsPatchAsync(Guid organizationId, Guid id, ScimPatchModel model)
|
|
{
|
|
return await Server.PatchAsync($"/v2/{organizationId}/groups/{id}", GetStringContent(model));
|
|
}
|
|
|
|
public async Task<HttpContext> GroupsDeleteAsync(Guid organizationId, Guid id)
|
|
{
|
|
return await Server.DeleteAsync($"/v2/{organizationId}/groups/{id}", null);
|
|
}
|
|
|
|
public async Task<HttpContext> UsersGetAsync(Guid organizationId, Guid id)
|
|
{
|
|
return await Server.GetAsync($"/v2/{organizationId}/users/{id}");
|
|
}
|
|
|
|
public async Task<HttpContext> UsersGetListAsync(Guid organizationId, string filter, int? count, int? startIndex)
|
|
{
|
|
var queryString = new QueryString("?");
|
|
|
|
if (!string.IsNullOrWhiteSpace(filter))
|
|
{
|
|
queryString = queryString.Add("filter", filter);
|
|
}
|
|
|
|
if (count.HasValue)
|
|
{
|
|
queryString = queryString.Add("count", count.ToString());
|
|
}
|
|
|
|
if (startIndex.HasValue)
|
|
{
|
|
queryString = queryString.Add("startIndex", startIndex.ToString());
|
|
}
|
|
|
|
return await Server.GetAsync($"/v2/{organizationId}/users", httpContext => httpContext.Request.QueryString = queryString);
|
|
}
|
|
|
|
public async Task<HttpContext> UsersPostAsync(Guid organizationId, ScimUserRequestModel model)
|
|
{
|
|
return await Server.PostAsync($"/v2/{organizationId}/users", GetStringContent(model));
|
|
}
|
|
|
|
public async Task<HttpContext> UsersPutAsync(Guid organizationId, Guid id, ScimUserRequestModel model)
|
|
{
|
|
return await Server.PutAsync($"/v2/{organizationId}/users/{id}", GetStringContent(model));
|
|
}
|
|
|
|
public async Task<HttpContext> UsersPatchAsync(Guid organizationId, Guid id, ScimPatchModel model)
|
|
{
|
|
return await Server.PatchAsync($"/v2/{organizationId}/users/{id}", GetStringContent(model));
|
|
}
|
|
|
|
public async Task<HttpContext> UsersDeleteAsync(Guid organizationId, Guid id, ScimUserRequestModel model)
|
|
{
|
|
return await Server.DeleteAsync($"/v2/{organizationId}/users/{id}", GetStringContent(model));
|
|
}
|
|
|
|
public void InitializeDbForTests(DatabaseContext databaseContext)
|
|
{
|
|
databaseContext.Organizations.AddRange(GetSeedingOrganizations());
|
|
databaseContext.Groups.AddRange(GetSeedingGroups());
|
|
databaseContext.Users.AddRange(GetSeedingUsers());
|
|
databaseContext.OrganizationUsers.AddRange(GetSeedingOrganizationUsers());
|
|
databaseContext.GroupUsers.AddRange(GetSeedingGroupUsers());
|
|
databaseContext.SaveChanges();
|
|
}
|
|
|
|
public void ReinitializeDbForTests(DatabaseContext databaseContext)
|
|
{
|
|
databaseContext.Organizations.RemoveRange(databaseContext.Organizations);
|
|
databaseContext.Groups.RemoveRange(databaseContext.Groups);
|
|
databaseContext.Users.RemoveRange(databaseContext.Users);
|
|
databaseContext.OrganizationUsers.RemoveRange(databaseContext.OrganizationUsers);
|
|
databaseContext.GroupUsers.RemoveRange(databaseContext.GroupUsers);
|
|
databaseContext.SaveChanges();
|
|
InitializeDbForTests(databaseContext);
|
|
}
|
|
|
|
private List<Infrastructure.EntityFramework.Models.User> GetSeedingUsers()
|
|
{
|
|
return new List<Infrastructure.EntityFramework.Models.User>()
|
|
{
|
|
new Infrastructure.EntityFramework.Models.User { Id = TestUserId1, Name = "Test User 1", ApiKey = "", Email = "user1@example.com", SecurityStamp = "" },
|
|
new Infrastructure.EntityFramework.Models.User { Id = TestUserId2, Name = "Test User 2", ApiKey = "", Email = "user2@example.com", SecurityStamp = "" },
|
|
new Infrastructure.EntityFramework.Models.User { Id = TestUserId3, Name = "Test User 3", ApiKey = "", Email = "user3@example.com", SecurityStamp = "" },
|
|
new Infrastructure.EntityFramework.Models.User { Id = TestUserId4, Name = "Test User 4", ApiKey = "", Email = "user4@example.com", SecurityStamp = "" },
|
|
};
|
|
}
|
|
|
|
private List<Infrastructure.EntityFramework.Models.Group> GetSeedingGroups()
|
|
{
|
|
return new List<Infrastructure.EntityFramework.Models.Group>()
|
|
{
|
|
new Infrastructure.EntityFramework.Models.Group { Id = TestGroupId1, OrganizationId = TestOrganizationId1, Name = "Test Group 1", ExternalId = "A" },
|
|
new Infrastructure.EntityFramework.Models.Group { Id = TestGroupId2, OrganizationId = TestOrganizationId1, Name = "Test Group 2", ExternalId = "B" },
|
|
new Infrastructure.EntityFramework.Models.Group { Id = TestGroupId3, OrganizationId = TestOrganizationId1, Name = "Test Group 3", ExternalId = "C" }
|
|
};
|
|
}
|
|
|
|
private List<Organization> GetSeedingOrganizations()
|
|
{
|
|
return new List<Organization>()
|
|
{
|
|
new Organization
|
|
{
|
|
Id = TestOrganizationId1,
|
|
Name = "Test Organization 1",
|
|
BillingEmail = $"billing-email+{TestOrganizationId1}@example.com",
|
|
UseGroups = true,
|
|
Plan = "Enterprise",
|
|
},
|
|
};
|
|
}
|
|
|
|
private List<Infrastructure.EntityFramework.Models.OrganizationUser> GetSeedingOrganizationUsers()
|
|
{
|
|
return new List<Infrastructure.EntityFramework.Models.OrganizationUser>()
|
|
{
|
|
new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId1, OrganizationId = TestOrganizationId1, UserId = TestUserId1, Status = Core.Enums.OrganizationUserStatusType.Confirmed, ExternalId = "UA", Email = "user1@example.com" },
|
|
new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId2, OrganizationId = TestOrganizationId1, UserId = TestUserId2, Status = Core.Enums.OrganizationUserStatusType.Confirmed, ExternalId = "UB", Email = "user2@example.com" },
|
|
new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId3, OrganizationId = TestOrganizationId1, UserId = TestUserId3, Status = Core.Enums.OrganizationUserStatusType.Revoked, ExternalId = "UC", Email = "user3@example.com" },
|
|
new Infrastructure.EntityFramework.Models.OrganizationUser { Id = TestOrganizationUserId4, OrganizationId = TestOrganizationId1, UserId = TestUserId4, Status = Core.Enums.OrganizationUserStatusType.Confirmed, ExternalId = "UD", Email = "user4@example.com" },
|
|
};
|
|
}
|
|
|
|
private List<Infrastructure.EntityFramework.Models.GroupUser> GetSeedingGroupUsers()
|
|
{
|
|
return new List<Infrastructure.EntityFramework.Models.GroupUser>()
|
|
{
|
|
new Infrastructure.EntityFramework.Models.GroupUser { GroupId = TestGroupId1, OrganizationUserId = TestOrganizationUserId1 },
|
|
new Infrastructure.EntityFramework.Models.GroupUser { GroupId = TestGroupId1, OrganizationUserId = TestOrganizationUserId4 }
|
|
};
|
|
}
|
|
|
|
private static StringContent GetStringContent(object obj) => new(JsonSerializer.Serialize(obj), Encoding.Default, MediaTypeNames.Application.Json);
|
|
|
|
public class TestAuthHandler : AuthenticationHandler<AuthenticationSchemeOptions>
|
|
{
|
|
public TestAuthHandler(IOptionsMonitor<AuthenticationSchemeOptions> options,
|
|
ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
|
|
: base(options, logger, encoder, clock)
|
|
{
|
|
}
|
|
|
|
protected override Task<AuthenticateResult> HandleAuthenticateAsync()
|
|
{
|
|
var claims = new[]
|
|
{
|
|
new Claim(ClaimTypes.Name, "Test user"),
|
|
new Claim("orgadmin", TestOrganizationId1.ToString())
|
|
};
|
|
var identity = new ClaimsIdentity(claims, "Test");
|
|
var principal = new ClaimsPrincipal(identity);
|
|
var ticket = new AuthenticationTicket(principal, "Test");
|
|
|
|
var result = AuthenticateResult.Success(ticket);
|
|
|
|
return Task.FromResult(result);
|
|
}
|
|
}
|
|
}
|