alfresco-ng2-components/lib/core/services/auth-guard-ecm.service.spec.ts

/*!
 * @license
 * Copyright 2019 Alfresco Software, Ltd.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

import { async, TestBed } from '@angular/core/testing';
import { AppConfigService } from '../app-config/app-config.service';
import { AuthGuardEcm } from './auth-guard-ecm.service';
import { AuthenticationService } from './authentication.service';
import { RouterStateSnapshot, Router } from '@angular/router';
import { setupTestBed } from '../testing/setup-test-bed';
import { CoreTestingModule } from '../testing/core.testing.module';
import { MatDialog } from '@angular/material/dialog';
import { TranslateModule } from '@ngx-translate/core';

describe('AuthGuardService ECM', () => {

    let authGuard: AuthGuardEcm;
    let authService: AuthenticationService;
    let router: Router;
    let appConfigService: AppConfigService;

    setupTestBed({
        imports: [
            TranslateModule.forRoot(),
            CoreTestingModule
        ]
    });

    beforeEach(() => {
        localStorage.clear();
        authService = TestBed.inject(AuthenticationService);
        authGuard = TestBed.inject(AuthGuardEcm);
        router = TestBed.inject(Router);
        appConfigService = TestBed.inject(AppConfigService);

        appConfigService.config.providers = 'ECM';
        appConfigService.config.auth = {};
        appConfigService.config.oauth2 = {};
    });

    it('if the alfresco js api is logged in should canActivate be true', async(() => {
        spyOn(authService, 'isEcmLoggedIn').and.returnValue(true);
        const route: RouterStateSnapshot = <RouterStateSnapshot>  {url : 'some-url'};

        expect(authGuard.canActivate(null, route)).toBeTruthy();
    }));

    it('if the alfresco js api is configured with withCredentials true should canActivate be true', async(() => {
        spyOn(authService, 'isBpmLoggedIn').and.returnValue(true);
        appConfigService.config.auth.withCredentials = true;

        const route: RouterStateSnapshot = <RouterStateSnapshot>  {url : 'some-url'};

        expect(authGuard.canActivate(null, route)).toBeTruthy();
    }));

    it('if the alfresco js api is NOT logged in should canActivate be false', async(() => {
        spyOn(authService, 'isEcmLoggedIn').and.returnValue(false);
        spyOn(router, 'navigateByUrl').and.stub();
        const route: RouterStateSnapshot = <RouterStateSnapshot> { url: 'some-url' };

        expect(authGuard.canActivate(null, route)).toBeFalsy();
    }));

    it('if the alfresco js api is NOT logged in should trigger a redirect event', async(() => {
        appConfigService.config.loginRoute = 'login';

        spyOn(router, 'navigateByUrl');
        spyOn(authService, 'isEcmLoggedIn').and.returnValue(false);
        const route: RouterStateSnapshot = <RouterStateSnapshot>  {url : 'some-url'};

        expect(authGuard.canActivate(null, route)).toBeFalsy();
        expect(router.navigateByUrl).toHaveBeenCalledWith('/login?redirectUrl=some-url');
    }));

    it('should redirect url if the alfresco js api is NOT logged in and isOAuthWithoutSilentLogin', async(() => {
        spyOn(router, 'navigateByUrl').and.stub();
        spyOn(authService, 'isEcmLoggedIn').and.returnValue(false);
        spyOn(authService, 'isOauth').and.returnValue(true);
        appConfigService.config.oauth2.silentLogin = false;
        const route: RouterStateSnapshot = <RouterStateSnapshot>  {url : 'some-url'};

        expect(authGuard.canActivate(null, route)).toBeFalsy();
        expect(router.navigateByUrl).toHaveBeenCalled();
    }));

    it('should redirect url if the alfresco js api is NOT logged in and isOAuth with silentLogin', async(() => {
        spyOn(router, 'navigateByUrl').and.stub();
        spyOn(authService, 'isEcmLoggedIn').and.returnValue(false);
        spyOn(authService, 'isOauth').and.returnValue(true);
        spyOn(authService, 'isPublicUrl').and.returnValue(false);
        spyOn(authService, 'ssoImplicitLogin').and.stub();

        appConfigService.config.oauth2 = {
            silentLogin: true,
            host: 'http://localhost:6543',
            redirectUri: '/',
            clientId: 'activiti',
            publicUrl: 'settings',
            scope: 'openid'
        };

        const route: RouterStateSnapshot = <RouterStateSnapshot>  {url : 'abc'};

        expect(authGuard.canActivate(null, route)).toBeTruthy();
        expect(router.navigateByUrl).toHaveBeenCalledTimes(1);
        expect(authService.ssoImplicitLogin).toHaveBeenCalledTimes(1);
    }));

    it('should not redirect url if NOT logged in and isOAuth but no silentLogin configured', async(() => {
        spyOn(router, 'navigateByUrl').and.stub();
        spyOn(authService, 'isEcmLoggedIn').and.returnValue(false);
        spyOn(authService, 'isOauth').and.returnValue(true);
        appConfigService.config.oauth2.silentLogin = undefined;
        const route: RouterStateSnapshot = <RouterStateSnapshot>  {url : 'some-url'};

        expect(authGuard.canActivate(null, route)).toBeFalsy();
        expect(router.navigateByUrl).toHaveBeenCalled();
    }));

    it('should set redirect navigation commands', async(() => {
        spyOn(authService, 'setRedirect').and.callThrough();
        spyOn(router, 'navigateByUrl').and.stub();
        const route: RouterStateSnapshot = <RouterStateSnapshot> { url: 'some-url' };

        authGuard.canActivate(null, route);

        expect(authService.setRedirect).toHaveBeenCalledWith({
            provider: 'ECM', url: 'some-url'
        });
        expect(authService.getRedirect()).toEqual('some-url');
    }));

    it('should set redirect navigation commands with query params', async(() => {
        spyOn(authService, 'setRedirect').and.callThrough();
        spyOn(router, 'navigateByUrl').and.stub();
        const route: RouterStateSnapshot = <RouterStateSnapshot> { url: 'some-url;q=123' };

        authGuard.canActivate(null, route);

        expect(authService.setRedirect).toHaveBeenCalledWith({
            provider: 'ECM', url: 'some-url;q=123'
        });
        expect(authService.getRedirect()).toEqual('some-url;q=123');
    }));

    it('should set redirect navigation commands with query params', async(() => {
        spyOn(authService, 'setRedirect').and.callThrough();
        spyOn(router, 'navigateByUrl').and.stub();
        const route: RouterStateSnapshot = <RouterStateSnapshot> { url: '/' };

        authGuard.canActivate(null, route);

        expect(authService.setRedirect).toHaveBeenCalledWith({
            provider: 'ECM', url: '/'
        });
        expect(authService.getRedirect()).toEqual('/');
    }));

    it('should get redirect url from config if there is one configured', async(() => {
        appConfigService.config.loginRoute = 'fakeLoginRoute';
        spyOn(authService, 'setRedirect').and.callThrough();
        spyOn(router, 'navigateByUrl').and.stub();
        const route: RouterStateSnapshot = <RouterStateSnapshot> { url: 'some-url' };

        authGuard.canActivate(null, route);

        expect(authService.setRedirect).toHaveBeenCalledWith({
            provider: 'ECM', url: 'some-url'
        });
        expect(router.navigateByUrl).toHaveBeenCalledWith('/fakeLoginRoute?redirectUrl=some-url');
    }));

    it('should to close the material dialog if is redirect to the login', () => {
        const materialDialog = TestBed.inject(MatDialog);

        spyOn(materialDialog, 'closeAll');

        spyOn(authService, 'setRedirect').and.callThrough();
        spyOn(router, 'navigateByUrl').and.stub();
        const route: RouterStateSnapshot = <RouterStateSnapshot> { url: 'some-url' };

        authGuard.canActivate(null, route);

        expect(authService.setRedirect).toHaveBeenCalledWith({
            provider: 'ECM', url: 'some-url'
        });

        expect(materialDialog.closeAll).toHaveBeenCalled();
    });
});