manager_test.go

package acl

import (
	"testing"

	"github.com/stretchr/testify/assert"
)

func TestNewManager(t *testing.T) {
	assert.Equal(t, &Manager{registry: map[string]*Role{}}, NewManager())
}

func TestManager_Register(t *testing.T) {
	manager := NewManager()
	role := NewRole("test")

	res, err := manager.Register(role)

	assert.Equal(t, manager, res)
	assert.NoError(t, err)
}

func TestManager_RegisterWithTheSameRole(t *testing.T) {
	manager := NewManager()
	roleA := NewRole("test")
	roleB := NewRole("test")

	res, err := manager.Register(roleA, roleB)

	assert.Error(t, err)
	assert.Equal(t, manager, res)
}

func TestManager_Ensure(t *testing.T) {
	a := assert.New(t)
	m := NewManager()
	r1 := NewRole("r1")

	m.Register(r1)
	a.Equal(r1, m.Ensure("r1"))

	r2 := m.Ensure("r2")
	a.Equal(r2, m.Ensure("r2"))
}

func TestManager_Get(t *testing.T) {
	manager := NewManager()

	assert.Nil(t, manager.Get("test"))

	role := NewRole("test")
	manager.Register(role)
	assert.NotNil(t, manager.Get("test"))
}

type userPayload struct {
	ID    string
	Roles []string
}

func TestManager_Examine(t *testing.T) {
	manager := NewManager()
	guest := NewRole("guest")
	user := NewRole("user").Grant("user.read").SetExaminer(func(payload interface{}) bool {
		user := payload.(userPayload)

		for _, role := range user.Roles {
			if role == "user" {
				return true
			}
		}

		return false
	})
	admin := NewRole("admin").Grant("user.delete").SetExaminer(func(payload interface{}) bool {
		user := payload.(userPayload)

		for _, role := range user.Roles {
			if role == "admin" {
				return true
			}
		}

		return false
	})
	manager.Register(guest, user, admin)

	rs := manager.Examine(userPayload{
		ID:    "test",
		Roles: []string{"user"},
	})
	assert.Len(t, rs.Matches, 1)
	assert.Equal(t, user, rs.GetRole("user"))

	rs = manager.Examine(userPayload{
		ID:    "test",
		Roles: []string{"user", "admin"},
	})
	assert.Len(t, rs.Matches, 2)

	var examinedUser *Role
	var examinedAdmin *Role
	for _, examined := range rs.Matches {
		if examined.Id == "user" {
			examinedUser = examined
		}

		if examined.Id == "admin" {
			examinedAdmin = examined
		}
	}
	assert.Equal(t, user, examinedUser)
	assert.Equal(t, admin, examinedAdmin)
}