inspec/test/unit/resources/aws_iam_user_provider_test.rb

# author: Simon Varlow
# author: Jeffrey Lyons
# author: Steffanie Freeman
# author: Alex Bedley
require 'aws-sdk'
require 'helper'
require 'aws_iam_user_provider'

class AwsIamUserProviderTest < Minitest::Test
  Username = 'test'.freeze

  def setup
    @mock_iam_resource = Minitest::Mock.new
    @mock_aws_connection = Minitest::Mock.new
    @mock_aws_connection.expect :iam_resource, @mock_iam_resource
    @user_provider = AwsIam::UserProvider.new(@mock_aws_connection)
  end

  def test_user
    @mock_iam_resource.expect :user, create_mock_user, [Username]
    assert !@user_provider.user(Username).nil?
  end

  def test_list_users
    @mock_iam_resource.expect(
      :users,
      [create_mock_user, create_mock_user],
    )
    mock_user_output = {
      name: Username,
      has_mfa_enabled?: true,
      has_console_password?: true,
      access_keys: [],
    }
    assert @user_provider.list_users == [mock_user_output, mock_user_output]
  end

  def test_list_users_no_users
    @mock_iam_resource.expect :users, []
    assert @user_provider.list_users == []
  end

  def test_has_mfa_enabled_returns_true
    @mock_iam_resource.expect(:user, create_mock_user(has_mfa_enabled: true),
                              [Username])
    assert @user_provider.user(Username)[:has_mfa_enabled?]
  end

  def test_has_mfa_enabled_returns_false
    @mock_iam_resource.expect(:user, create_mock_user(has_mfa_enabled: false),
                              [Username])
    assert !@user_provider.user(Username)[:has_mfa_enabled?]
  end

  def test_has_console_password_returns_true
    @mock_iam_resource.expect(
      :user,
      create_mock_user(has_console_password: true),
      [Username],
    )
    assert @user_provider.user(Username)[:has_console_password?]
  end

  def test_has_console_password_returns_false
    @mock_iam_resource.expect(
      :user,
      create_mock_user(has_console_password: false),
      [Username],
    )
    assert !@user_provider.user(Username)[:has_console_password?]
  end

  def test_has_console_password_returns_false_when_nosuchentity
    @mock_iam_resource.expect(
      :user,
      create_mock_user_throw(Aws::IAM::Errors::NoSuchEntity.new(nil, nil)),
      [Username],
    )
    assert !@user_provider.user(Username)[:has_console_password?]
  end

  def test_has_console_password_throws
    @mock_iam_resource.expect(:user, create_mock_user_throw(ArgumentError),
                              [Username])

    assert_raises ArgumentError do
      @user_provider.user(Username)
    end
  end

  def test_access_keys_returns_access_keys
    access_key = Object.new
    @mock_iam_resource.expect(
      :user,
      create_mock_user(access_keys: [access_key]),
      [Username],
    )

    assert_equal [access_key], @user_provider.user(Username)[:access_keys]
  end

  private

  def create_mock_user(has_console_password: true, has_mfa_enabled: true,
                       access_keys: [])
    mock_login_profile = Minitest::Mock.new
    mock_login_profile.expect :create_date, has_console_password ? 'date' : nil

    mock_user = Minitest::Mock.new
    mock_user.expect :name, Username
    mock_user.expect :mfa_devices, has_mfa_enabled ? ['device'] : []
    mock_user.expect :login_profile, mock_login_profile
    mock_user.expect :access_keys, access_keys
  end

  def create_mock_user_throw(exception)
    mock_login_profile = Minitest::Mock.new
    mock_login_profile.expect :create_date, nil do
      raise exception
    end

    mock_user = Minitest::Mock.new
    mock_user.expect :name, Username
    mock_user.expect :mfa_devices, []
    mock_user.expect :login_profile, mock_login_profile
    mock_user.expect :access_keys, []
  end
end