def test_empty(self) -> None:
request_access1 = RequestAccess.build({})
rules1 = request_access1.get_matching_rules("get", "a/b/c")
self.assertEqual(rules1, None, "expected nothing")
guid2 = uuid.uuid4()
request_access1 = RequestAccess.build({
"a/b/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid2],
)
})
rules1 = request_access1.get_matching_rules("get", "")
self.assertEqual(rules1, None, "expected nothing")
def test_priority(self) -> None:
guid1 = uuid.uuid4()
guid2 = uuid.uuid4()
request_access = RequestAccess.build({
"a/*/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid1],
),
"a/b/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid2],
),
})
rules = request_access.get_matching_rules("get", "a/b/c")
assert rules is not None
self.assertEqual(
rules.allowed_groups_ids[0],
guid2,
"expected to match the most specific rule",
)
def test_override_rule(self) -> None:
guid1 = uuid.uuid4()
guid2 = uuid.uuid4()
request_access = RequestAccess.build({
"a/b/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid1],
),
"a/b/c/d":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid2],
),
})
rules1 = request_access.get_matching_rules("get", "a/b/c")
assert rules1 is not None
self.assertEqual(rules1.allowed_groups_ids[0], guid1,
"expected to inherit rule of a/b/c")
rules2 = request_access.get_matching_rules("get", "a/b/c/d")
assert rules2 is not None
self.assertEqual(rules2.allowed_groups_ids[0], guid2,
"expected to inherit rule of a/b/c/d")
def test_adding_rule_on_same_path(self) -> None:
guid1 = uuid.uuid4()
try:
RequestAccess.build({
"a/b/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid1],
),
"a/b/c/":
ApiAccessRule(
methods=["get"],
allowed_groups=[],
),
})
self.fail("this is expected to fail")
except RuleConflictError:
pass
def test_wildcard(self) -> None:
guid1 = uuid.uuid4()
request_access = RequestAccess.build({
"b/*/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid1],
)
})
rules = request_access.get_matching_rules("get", "b/b/c")
assert rules is not None
self.assertNotEqual(len(rules.allowed_groups_ids), 0,
"empty allowed groups")
self.assertEqual(rules.allowed_groups_ids[0], guid1)
def test_exact_match(self) -> None:
guid1 = uuid.uuid4()
request_access = RequestAccess.build({
"a/b/c":
ApiAccessRule(
methods=["get"],
allowed_groups=[guid1],
)
})
rules1 = request_access.get_matching_rules("get", "a/b/c")
rules2 = request_access.get_matching_rules("get", "b/b/e")
assert rules1 is not None
self.assertNotEqual(len(rules1.allowed_groups_ids), 0,
"empty allowed groups")
self.assertEqual(rules1.allowed_groups_ids[0], guid1)
self.assertEqual(rules2, None, "expected nothing")