inspec/lib/plugins/inspec-compliance/test/unit/target_test.rb

require "minitest/autorun"
require "mocha/minitest"
require_relative "../../lib/inspec-compliance/api"

describe InspecPlugins::Compliance::Fetcher do
  let(:config) { { "server" => "myserver" } }

  describe "the check_compliance_token method" do
    let(:fetcher) { InspecPlugins::Compliance::Fetcher.new("a/bad/url", config) }

    it "returns without error if token is set" do
      config["token"] = "my-token"
      fetcher.class.check_compliance_token("http://test.com", config)
    end

    it "returns an error when token is not set" do
      ex = assert_raises(Inspec::FetcherFailure) { fetcher.class.check_compliance_token("http://test.com", config) }
      _(ex.message).must_include "Cannot fetch http://test.com because your automate2 token has not been\nconfigured."
    end
  end

  describe "when the server is an automate2 server" do

    it "returns the correct owner and profile name" do
      config["profile"] = ["admin", "ssh-baseline", nil]
      fetcher = InspecPlugins::Compliance::Fetcher.new("myserver/profile", config)
      _(fetcher.send(:compliance_profile_name)).must_equal "admin/ssh-baseline"
    end
  end

  describe "when the server calls an automate profile" do
    let(:profiles_result) do
      [{ "name" => "ssh-baseline",
         "title" => "InSpec Profile",
         "maintainer" => "The Authors",
         "copyright" => "The Authors",
         "copyright_email" => "you@example.com",
         "license" => "Apache-2.0",
         "summary" => "An InSpec Compliance Profile",
         "version" => "0.1.1",
         "owner" => "admin",
         "supports" => [],
         "depends" => [],
         "sha256" => "132j1kjdasfasdoaefaewo12312",
         "groups" => [],
         "controls" => [],
         "attributes" => [],
         "latest_version" => "" }]
    end
    before do
      InspecPlugins::Compliance::Configuration.expects(:new).returns({ "token" => "123abc", "server" => "https://a2.instance.com" })
    end

    it "returns the correct profile name when parsing url" do
      InspecPlugins::Compliance::API.stubs(:profiles).returns(["success", profiles_result])
      fetcher = InspecPlugins::Compliance::Fetcher.resolve("compliance://admin/ssh-baseline")
      assert = ["admin", "ssh-baseline", nil]
      _(fetcher.instance_variable_get(:"@config")["profile"]).must_equal assert
    end

    it "returns the correct profile name when parsing compliance hash" do
      InspecPlugins::Compliance::API.stubs(:profiles).returns(["success", profiles_result])
      hash = {
        target: "https://a2.instance.com/api/v0/compliance/tar",
        compliance: "admin/ssh-baseline",
        sha256: "132j1kjdasfasdoaefaewo12312",
      }
      fetcher = InspecPlugins::Compliance::Fetcher.resolve(hash)
      assert = ["admin", "ssh-baseline", nil]
      _(fetcher.instance_variable_get(:"@config")["profile"]).must_equal assert
    end
  end

  describe "when the server provides a sha256 in the profiles_result" do
    let(:profiles_result) do
      [{ "name" => "ssh-baseline",
         "title" => "InSpec Profile",
         "maintainer" => "The Authors",
         "copyright" => "The Authors",
         "copyright_email" => "you@example.com",
         "license" => "Apache-2.0",
         "summary" => "An InSpec Compliance Profile",
         "version" => "0.1.1",
         "owner" => "admin",
         "supports" => [],
         "depends" => [],
         "sha256" => "132j1kjdasfasdoaefaewo12312",
         "groups" => [],
         "controls" => [],
         "attributes" => [],
         "latest_version" => "" }]
    end

    before do
      InspecPlugins::Compliance::Configuration.expects(:new).returns({ "token" => "123abc", "server" => "https://a2.instance.com" })
    end

    it "contains the upstream_sha256" do
      InspecPlugins::Compliance::API.stubs(:profiles).returns(["success", profiles_result])
      prof = profiles_result[0]
      target = "compliance://#{prof["owner"]}/#{prof["name"]}"
      fetcher = InspecPlugins::Compliance::Fetcher.resolve(target)
      _(fetcher.upstream_sha256).must_equal prof["sha256"]
    end
  end
end