Add auth specific tests
This commit is contained in:
Jake Barnby
parent
ac8e47ac2d
commit
d7a1b7b3fc
240
tests/e2e/Services/GraphQL/GraphQLAuthTest.php
Normal file
240
tests/e2e/Services/GraphQL/GraphQLAuthTest.php
Normal file
|
|
@ -0,0 +1,240 @@
|
|||
<?php
|
||||
|
||||
namespace Tests\E2E\Services\GraphQL;
|
||||
|
||||
use Tests\E2E\Client;
|
||||
use Tests\E2E\Scopes\ProjectCustom;
|
||||
use Tests\E2E\Scopes\Scope;
|
||||
use Tests\E2E\Scopes\SideClient;
|
||||
|
||||
class GraphQLAuthTest extends Scope
|
||||
{
|
||||
use ProjectCustom;
|
||||
use SideClient;
|
||||
use GraphQLBase;
|
||||
|
||||
private array $account1;
|
||||
private array $account2;
|
||||
|
||||
private string $token1;
|
||||
private string $token2;
|
||||
|
||||
private array $database;
|
||||
private array $collection;
|
||||
|
||||
public function setUp(): void
|
||||
{
|
||||
parent::setUp();
|
||||
|
||||
$projectId = $this->getProject()['$id'];
|
||||
$query = $this->getQuery(self::$CREATE_ACCOUNT);
|
||||
|
||||
$email1 = 'test' . \rand() . '@test.com';
|
||||
$email2 = 'test' . \rand() . '@test.com';
|
||||
|
||||
// Create account 1
|
||||
$graphQLPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'userId' => 'unique()',
|
||||
'name' => 'User Name',
|
||||
'email' => $email1,
|
||||
'password' => 'password',
|
||||
],
|
||||
];
|
||||
$this->account1 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
], $graphQLPayload);
|
||||
|
||||
// Create account 2
|
||||
$graphQLPayload['variables']['email'] = $email2;
|
||||
$account2 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
], $graphQLPayload);
|
||||
|
||||
// Create session 1
|
||||
$query = $this->getQuery(self::$CREATE_ACCOUNT_SESSION);
|
||||
$graphQLPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'email' => $email1,
|
||||
'password' => 'password',
|
||||
]
|
||||
];
|
||||
$session1 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
], $graphQLPayload);
|
||||
|
||||
$this->token1 = $this->client->parseCookie(
|
||||
(string)$session1['headers']['set-cookie']
|
||||
)['a_session_' . $projectId];
|
||||
|
||||
// Create session 2
|
||||
$graphQLPayload['variables']['email'] = $email2;
|
||||
$session2 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
], $graphQLPayload);
|
||||
|
||||
$this->token2 = $this->client->parseCookie(
|
||||
(string)$session2['headers']['set-cookie']
|
||||
)['a_session_' . $projectId];
|
||||
|
||||
// Create database
|
||||
$query = $this->getQuery(self::$CREATE_DATABASE);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => 'unique()',
|
||||
'name' => 'Actors',
|
||||
]
|
||||
];
|
||||
$this->database = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'x-appwrite-key' => $this->getProject()['apiKey'],
|
||||
], $gqlPayload);
|
||||
|
||||
// Create collection
|
||||
$query = $this->getQuery(self::$CREATE_COLLECTION);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||
'collectionId' => 'unique()',
|
||||
'name' => 'Actors',
|
||||
'permission' => 'document',
|
||||
'read' => ['role:member'],
|
||||
'write' => ['role:member'],
|
||||
]
|
||||
];
|
||||
$this->collection = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'x-appwrite-key' => $this->getProject()['apiKey'],
|
||||
], $gqlPayload);
|
||||
|
||||
// Create string attribute
|
||||
$query = $this->getQuery(self::$CREATE_STRING_ATTRIBUTE);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||
'key' => 'name',
|
||||
'size' => 256,
|
||||
'required' => true,
|
||||
]
|
||||
];
|
||||
$this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'x-appwrite-key' => $this->getProject()['apiKey'],
|
||||
], $gqlPayload);
|
||||
|
||||
sleep(1);
|
||||
}
|
||||
|
||||
public function testInvalidAuth()
|
||||
{
|
||||
$projectId = $this->getProject()['$id'];
|
||||
|
||||
// Create document as account 1
|
||||
$query = $this->getQuery(self::$CREATE_DOCUMENT);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||
'documentId' => 'unique()',
|
||||
'data' => [
|
||||
'name' => 'John Doe',
|
||||
],
|
||||
'read' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||
'write' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||
]
|
||||
];
|
||||
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||
], $gqlPayload);
|
||||
|
||||
// Try to read as account 1
|
||||
$query = $this->getQuery(self::$GET_DOCUMENT);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||
'documentId' => $document['body']['data']['databasesCreateDocument']['_id'],
|
||||
]
|
||||
];
|
||||
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||
], $gqlPayload);
|
||||
|
||||
$this->assertIsArray($document['body']['data']['databasesGetDocument']);
|
||||
$this->assertArrayNotHasKey('errors', $document['body']);
|
||||
|
||||
// Try to read as account 2
|
||||
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'cookie' => 'a_session_' . $projectId . '=' . $this->token2,
|
||||
], $gqlPayload);
|
||||
|
||||
$message = 'No document found';
|
||||
$this->assertArrayHasKey('errors', $document['body']);
|
||||
$this->assertEquals($message, $document['body']['errors'][0]['message']);
|
||||
}
|
||||
|
||||
public function testValidAuth()
|
||||
{
|
||||
$projectId = $this->getProject()['$id'];
|
||||
|
||||
// Create document as account 1
|
||||
$query = $this->getQuery(self::$CREATE_DOCUMENT);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||
'documentId' => 'unique()',
|
||||
'data' => [
|
||||
'name' => 'John Doe',
|
||||
],
|
||||
'read' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||
'write' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||
]
|
||||
];
|
||||
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||
], $gqlPayload);
|
||||
|
||||
// Try to delete as account 1
|
||||
$query = $this->getQuery(self::$DELETE_DOCUMENT);
|
||||
$gqlPayload = [
|
||||
'query' => $query,
|
||||
'variables' => [
|
||||
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||
'documentId' => $document['body']['data']['databasesCreateDocument']['_id'],
|
||||
]
|
||||
];
|
||||
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||
'content-type' => 'application/json',
|
||||
'x-appwrite-project' => $projectId,
|
||||
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||
], $gqlPayload);
|
||||
|
||||
$this->assertEquals(204, $document['headers']['status-code']);
|
||||
}
|
||||
}
|
||||
Loading…
Reference in a new issue