Add auth specific tests
This commit is contained in:
parent
ac8e47ac2d
commit
d7a1b7b3fc
1 changed files with 240 additions and 0 deletions
240
tests/e2e/Services/GraphQL/GraphQLAuthTest.php
Normal file
240
tests/e2e/Services/GraphQL/GraphQLAuthTest.php
Normal file
|
@ -0,0 +1,240 @@
|
||||||
|
<?php
|
||||||
|
|
||||||
|
namespace Tests\E2E\Services\GraphQL;
|
||||||
|
|
||||||
|
use Tests\E2E\Client;
|
||||||
|
use Tests\E2E\Scopes\ProjectCustom;
|
||||||
|
use Tests\E2E\Scopes\Scope;
|
||||||
|
use Tests\E2E\Scopes\SideClient;
|
||||||
|
|
||||||
|
class GraphQLAuthTest extends Scope
|
||||||
|
{
|
||||||
|
use ProjectCustom;
|
||||||
|
use SideClient;
|
||||||
|
use GraphQLBase;
|
||||||
|
|
||||||
|
private array $account1;
|
||||||
|
private array $account2;
|
||||||
|
|
||||||
|
private string $token1;
|
||||||
|
private string $token2;
|
||||||
|
|
||||||
|
private array $database;
|
||||||
|
private array $collection;
|
||||||
|
|
||||||
|
public function setUp(): void
|
||||||
|
{
|
||||||
|
parent::setUp();
|
||||||
|
|
||||||
|
$projectId = $this->getProject()['$id'];
|
||||||
|
$query = $this->getQuery(self::$CREATE_ACCOUNT);
|
||||||
|
|
||||||
|
$email1 = 'test' . \rand() . '@test.com';
|
||||||
|
$email2 = 'test' . \rand() . '@test.com';
|
||||||
|
|
||||||
|
// Create account 1
|
||||||
|
$graphQLPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'userId' => 'unique()',
|
||||||
|
'name' => 'User Name',
|
||||||
|
'email' => $email1,
|
||||||
|
'password' => 'password',
|
||||||
|
],
|
||||||
|
];
|
||||||
|
$this->account1 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
], $graphQLPayload);
|
||||||
|
|
||||||
|
// Create account 2
|
||||||
|
$graphQLPayload['variables']['email'] = $email2;
|
||||||
|
$account2 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
], $graphQLPayload);
|
||||||
|
|
||||||
|
// Create session 1
|
||||||
|
$query = $this->getQuery(self::$CREATE_ACCOUNT_SESSION);
|
||||||
|
$graphQLPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'email' => $email1,
|
||||||
|
'password' => 'password',
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$session1 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
], $graphQLPayload);
|
||||||
|
|
||||||
|
$this->token1 = $this->client->parseCookie(
|
||||||
|
(string)$session1['headers']['set-cookie']
|
||||||
|
)['a_session_' . $projectId];
|
||||||
|
|
||||||
|
// Create session 2
|
||||||
|
$graphQLPayload['variables']['email'] = $email2;
|
||||||
|
$session2 = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
], $graphQLPayload);
|
||||||
|
|
||||||
|
$this->token2 = $this->client->parseCookie(
|
||||||
|
(string)$session2['headers']['set-cookie']
|
||||||
|
)['a_session_' . $projectId];
|
||||||
|
|
||||||
|
// Create database
|
||||||
|
$query = $this->getQuery(self::$CREATE_DATABASE);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => 'unique()',
|
||||||
|
'name' => 'Actors',
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$this->database = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'x-appwrite-key' => $this->getProject()['apiKey'],
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
// Create collection
|
||||||
|
$query = $this->getQuery(self::$CREATE_COLLECTION);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||||
|
'collectionId' => 'unique()',
|
||||||
|
'name' => 'Actors',
|
||||||
|
'permission' => 'document',
|
||||||
|
'read' => ['role:member'],
|
||||||
|
'write' => ['role:member'],
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$this->collection = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'x-appwrite-key' => $this->getProject()['apiKey'],
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
// Create string attribute
|
||||||
|
$query = $this->getQuery(self::$CREATE_STRING_ATTRIBUTE);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||||
|
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||||
|
'key' => 'name',
|
||||||
|
'size' => 256,
|
||||||
|
'required' => true,
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'x-appwrite-key' => $this->getProject()['apiKey'],
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
sleep(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
public function testInvalidAuth()
|
||||||
|
{
|
||||||
|
$projectId = $this->getProject()['$id'];
|
||||||
|
|
||||||
|
// Create document as account 1
|
||||||
|
$query = $this->getQuery(self::$CREATE_DOCUMENT);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||||
|
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||||
|
'documentId' => 'unique()',
|
||||||
|
'data' => [
|
||||||
|
'name' => 'John Doe',
|
||||||
|
],
|
||||||
|
'read' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||||
|
'write' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
// Try to read as account 1
|
||||||
|
$query = $this->getQuery(self::$GET_DOCUMENT);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||||
|
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||||
|
'documentId' => $document['body']['data']['databasesCreateDocument']['_id'],
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
$this->assertIsArray($document['body']['data']['databasesGetDocument']);
|
||||||
|
$this->assertArrayNotHasKey('errors', $document['body']);
|
||||||
|
|
||||||
|
// Try to read as account 2
|
||||||
|
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'cookie' => 'a_session_' . $projectId . '=' . $this->token2,
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
$message = 'No document found';
|
||||||
|
$this->assertArrayHasKey('errors', $document['body']);
|
||||||
|
$this->assertEquals($message, $document['body']['errors'][0]['message']);
|
||||||
|
}
|
||||||
|
|
||||||
|
public function testValidAuth()
|
||||||
|
{
|
||||||
|
$projectId = $this->getProject()['$id'];
|
||||||
|
|
||||||
|
// Create document as account 1
|
||||||
|
$query = $this->getQuery(self::$CREATE_DOCUMENT);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||||
|
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||||
|
'documentId' => 'unique()',
|
||||||
|
'data' => [
|
||||||
|
'name' => 'John Doe',
|
||||||
|
],
|
||||||
|
'read' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||||
|
'write' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']],
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
// Try to delete as account 1
|
||||||
|
$query = $this->getQuery(self::$DELETE_DOCUMENT);
|
||||||
|
$gqlPayload = [
|
||||||
|
'query' => $query,
|
||||||
|
'variables' => [
|
||||||
|
'databaseId' => $this->database['body']['data']['databasesCreate']['_id'],
|
||||||
|
'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'],
|
||||||
|
'documentId' => $document['body']['data']['databasesCreateDocument']['_id'],
|
||||||
|
]
|
||||||
|
];
|
||||||
|
$document = $this->client->call(Client::METHOD_POST, '/graphql', [
|
||||||
|
'content-type' => 'application/json',
|
||||||
|
'x-appwrite-project' => $projectId,
|
||||||
|
'cookie' => 'a_session_' . $projectId . '=' . $this->token1,
|
||||||
|
], $gqlPayload);
|
||||||
|
|
||||||
|
$this->assertEquals(204, $document['headers']['status-code']);
|
||||||
|
}
|
||||||
|
}
|
Loading…
Reference in a new issue