mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
cf16272a73
ACLs can now be defined by subdomain AND resource using pattern matching with regular expressions. It allows a very fine-grained access control to backend resources. [Note] For using example environmnent, user must update its /etc/hosts with new subdomains updated in README.
114 lines
3.1 KiB
TypeScript
114 lines
3.1 KiB
TypeScript
import * as Assert from "assert";
|
|
import {
|
|
UserConfiguration,
|
|
LdapConfiguration, ACLConfiguration
|
|
} from "../../../../src/server/lib/configuration/Configuration";
|
|
import { ConfigurationAdapter } from "../../../../src/server/lib/configuration/ConfigurationAdapter";
|
|
|
|
describe("test config adapter", function () {
|
|
function build_yaml_config(): UserConfiguration {
|
|
const yaml_config: UserConfiguration = {
|
|
port: 8080,
|
|
ldap: {
|
|
url: "http://ldap",
|
|
base_dn: "dc=example,dc=com",
|
|
additional_users_dn: "ou=users",
|
|
additional_groups_dn: "ou=groups",
|
|
user: "user",
|
|
password: "pass"
|
|
},
|
|
session: {
|
|
domain: "example.com",
|
|
secret: "secret",
|
|
expiration: 40000
|
|
},
|
|
storage: {
|
|
local: {
|
|
path: "/mydirectory"
|
|
}
|
|
},
|
|
regulation: {
|
|
max_retries: 3,
|
|
find_time: 5 * 60,
|
|
ban_time: 5 * 60
|
|
},
|
|
logs_level: "debug",
|
|
notifier: {
|
|
gmail: {
|
|
username: "user",
|
|
password: "password"
|
|
}
|
|
}
|
|
};
|
|
return yaml_config;
|
|
}
|
|
|
|
it("should read the port from the yaml file", function () {
|
|
const yaml_config = build_yaml_config();
|
|
yaml_config.port = 7070;
|
|
const config = ConfigurationAdapter.adapt(yaml_config);
|
|
Assert.equal(config.port, 7070);
|
|
});
|
|
|
|
it("should default the port to 8080 if not provided", function () {
|
|
const yaml_config = build_yaml_config();
|
|
delete yaml_config.port;
|
|
const config = ConfigurationAdapter.adapt(yaml_config);
|
|
Assert.equal(config.port, 8080);
|
|
});
|
|
|
|
it("should get the session attributes", function () {
|
|
const yaml_config = build_yaml_config();
|
|
yaml_config.session = {
|
|
domain: "example.com",
|
|
secret: "secret",
|
|
expiration: 3600
|
|
};
|
|
const config = ConfigurationAdapter.adapt(yaml_config);
|
|
Assert.equal(config.session.domain, "example.com");
|
|
Assert.equal(config.session.secret, "secret");
|
|
Assert.equal(config.session.expiration, 3600);
|
|
});
|
|
|
|
it("should get the log level", function () {
|
|
const yaml_config = build_yaml_config();
|
|
yaml_config.logs_level = "debug";
|
|
const config = ConfigurationAdapter.adapt(yaml_config);
|
|
Assert.equal(config.logs_level, "debug");
|
|
});
|
|
|
|
it("should get the notifier config", function () {
|
|
const yaml_config = build_yaml_config();
|
|
yaml_config.notifier = {
|
|
gmail: {
|
|
username: "user",
|
|
password: "pass"
|
|
}
|
|
};
|
|
const config = ConfigurationAdapter.adapt(yaml_config);
|
|
Assert.deepEqual(config.notifier, {
|
|
gmail: {
|
|
username: "user",
|
|
password: "pass"
|
|
}
|
|
});
|
|
});
|
|
|
|
it("should get the access_control config", function () {
|
|
const yaml_config = build_yaml_config();
|
|
yaml_config.access_control = {
|
|
default_policy: "deny",
|
|
any: [],
|
|
users: {},
|
|
groups: {}
|
|
};
|
|
const config = ConfigurationAdapter.adapt(yaml_config);
|
|
Assert.deepEqual(config.access_control, {
|
|
default_policy: "deny",
|
|
any: [],
|
|
users: {},
|
|
groups: {}
|
|
} as ACLConfiguration);
|
|
});
|
|
});
|