inspec/test/unit/resources/aws_iam_user_provider_test.rb

127 lines
3.6 KiB
Ruby
Raw Normal View History

# author: Simon Varlow
# author: Jeffrey Lyons
# author: Steffanie Freeman
# author: Alex Bedley
require 'aws-sdk'
require 'helper'
require 'aws_iam_user_provider'
class AwsIamUserProviderTest < Minitest::Test
Username = 'test'.freeze
def setup
@mock_iam_resource = Minitest::Mock.new
@mock_aws_connection = Minitest::Mock.new
@mock_aws_connection.expect :iam_resource, @mock_iam_resource
@user_provider = AwsIam::UserProvider.new(@mock_aws_connection)
end
def test_user
@mock_iam_resource.expect :user, create_mock_user, [Username]
assert !@user_provider.user(Username).nil?
end
def test_list_users
@mock_iam_resource.expect(
:users,
[create_mock_user, create_mock_user, create_mock_user],
)
mock_user_output = {
has_mfa_enabled?: true,
has_console_password?: true,
access_keys: [],
}
assert @user_provider.list_users == [mock_user_output, mock_user_output,
mock_user_output]
end
def test_list_users_no_users
@mock_iam_resource.expect :users, []
assert @user_provider.list_users == []
end
def test_has_mfa_enabled_returns_true
@mock_iam_resource.expect(:user, create_mock_user(has_mfa_enabled: true),
[Username])
assert @user_provider.user(Username)[:has_mfa_enabled?]
end
def test_has_mfa_enabled_returns_false
@mock_iam_resource.expect(:user, create_mock_user(has_mfa_enabled: false),
[Username])
assert !@user_provider.user(Username)[:has_mfa_enabled?]
end
def test_has_console_password_returns_true
@mock_iam_resource.expect(
:user,
create_mock_user(has_console_password: true),
[Username],
)
assert @user_provider.user(Username)[:has_console_password?]
end
def test_has_console_password_returns_false
@mock_iam_resource.expect(
:user,
create_mock_user(has_console_password: false),
[Username],
)
assert !@user_provider.user(Username)[:has_console_password?]
end
def test_has_console_password_returns_false_when_nosuchentity
@mock_iam_resource.expect(
:user,
create_mock_user_throw(Aws::IAM::Errors::NoSuchEntity.new(nil, nil)),
[Username],
)
assert !@user_provider.user(Username)[:has_console_password?]
end
def test_has_console_password_throws
@mock_iam_resource.expect(:user, create_mock_user_throw(ArgumentError),
[Username])
assert_raises ArgumentError do
@user_provider.user(Username)
end
end
def test_access_keys_returns_access_keys
access_key = Object.new
@mock_iam_resource.expect(
:user,
create_mock_user(access_keys: [access_key]),
[Username],
)
assert_equal [access_key], @user_provider.user(Username)[:access_keys]
end
private
def create_mock_user(has_console_password: true, has_mfa_enabled: true,
access_keys: [])
mock_login_profile = Minitest::Mock.new
mock_login_profile.expect :create_date, has_console_password ? 'date' : nil
mock_user = Minitest::Mock.new
mock_user.expect :mfa_devices, has_mfa_enabled ? ['device'] : []
mock_user.expect :login_profile, mock_login_profile
mock_user.expect :access_keys, access_keys
end
def create_mock_user_throw(exception)
mock_login_profile = Minitest::Mock.new
mock_login_profile.expect :create_date, nil do
raise exception
end
mock_user = Minitest::Mock.new
mock_user.expect :mfa_devices, []
mock_user.expect :login_profile, mock_login_profile
mock_user.expect :access_keys, []
end
end