inspec/test/unit/resources/mysql_session_test.rb

require "helper"
require "inspec/resource"
require "inspec/resources/mysql_session"
require "inspec/resources/command"

describe "Inspec::Resources::MysqlSession" do
  it "verify mysql_session escaped login details with single quotes correctly" do
    resource = load_resource("mysql_session",
                             "root",
                             %q{'%"'"&^*&()'*%})

    _(resource.send(:create_mysql_cmd, "SELECT 1 FROM DUAL;"))
      .must_equal(%q{mysql -uroot -p\'\%\"\'\"\&\^\*\&\(\)\'\*\% -h localhost -s -e "SELECT 1 FROM DUAL;"})
    _(resource.resource_id).must_equal("mysql_session:User:root:Host:localhost:Database:")
  end
  it "verify mysql_session omits optional username and password" do
    resource = load_resource("mysql_session")

    _(resource.send(:create_mysql_cmd, "SELECT 1 FROM DUAL;"))
      .must_equal('mysql -h localhost -s -e "SELECT 1 FROM DUAL;"')
    _(resource.resource_id).must_equal("mysql_session:User::Host:localhost:Database:")
  end
  it "verify mysql_session redacts output" do
    cmd = %q{mysql -uroot -p\'\%\"\'\"\&\^\*\&\(\)\'\*\% -h localhost -s -e "SELECT 1 FROM DUAL;"}
    options = { redact_regex: /(mysql -u\w+ -p).+(\s-(h|S).*)/ }
    resource = load_resource("command", cmd, options)

    expected_to_s = %q{Command: `mysql -uroot -pREDACTED -h localhost -s -e "SELECT 1 FROM DUAL;"`}
    _(resource.to_s).must_equal(expected_to_s)
  end
  it "fails when no user, password" do
    resource = load_resource("mysql_session", nil, nil, "localhost", 3306)
    _(resource.resource_failed?).must_equal true
    _(resource.resource_exception_message).must_equal "Can't run MySQL SQL checks without authentication."
  end
  it "fails when no connection established" do
    resource = load_resource("mysql_session", "root", "root", "localhost", 3306)
    _(resource.resource_failed?).must_equal true
    _(resource.resource_exception_message).must_include "MySQL query with errors"
  end

end