From d7a1b7b3fcfc75759e445c99bcc4e3818660a6bf Mon Sep 17 00:00:00 2001 From: Jake Barnby Date: Wed, 13 Jul 2022 19:38:11 +1200 Subject: [PATCH] Add auth specific tests --- .../e2e/Services/GraphQL/GraphQLAuthTest.php | 240 ++++++++++++++++++ 1 file changed, 240 insertions(+) create mode 100644 tests/e2e/Services/GraphQL/GraphQLAuthTest.php diff --git a/tests/e2e/Services/GraphQL/GraphQLAuthTest.php b/tests/e2e/Services/GraphQL/GraphQLAuthTest.php new file mode 100644 index 0000000000..edc6f0c67c --- /dev/null +++ b/tests/e2e/Services/GraphQL/GraphQLAuthTest.php @@ -0,0 +1,240 @@ +getProject()['$id']; + $query = $this->getQuery(self::$CREATE_ACCOUNT); + + $email1 = 'test' . \rand() . '@test.com'; + $email2 = 'test' . \rand() . '@test.com'; + + // Create account 1 + $graphQLPayload = [ + 'query' => $query, + 'variables' => [ + 'userId' => 'unique()', + 'name' => 'User Name', + 'email' => $email1, + 'password' => 'password', + ], + ]; + $this->account1 = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + ], $graphQLPayload); + + // Create account 2 + $graphQLPayload['variables']['email'] = $email2; + $account2 = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + ], $graphQLPayload); + + // Create session 1 + $query = $this->getQuery(self::$CREATE_ACCOUNT_SESSION); + $graphQLPayload = [ + 'query' => $query, + 'variables' => [ + 'email' => $email1, + 'password' => 'password', + ] + ]; + $session1 = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + ], $graphQLPayload); + + $this->token1 = $this->client->parseCookie( + (string)$session1['headers']['set-cookie'] + )['a_session_' . $projectId]; + + // Create session 2 + $graphQLPayload['variables']['email'] = $email2; + $session2 = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + ], $graphQLPayload); + + $this->token2 = $this->client->parseCookie( + (string)$session2['headers']['set-cookie'] + )['a_session_' . $projectId]; + + // Create database + $query = $this->getQuery(self::$CREATE_DATABASE); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => 'unique()', + 'name' => 'Actors', + ] + ]; + $this->database = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'x-appwrite-key' => $this->getProject()['apiKey'], + ], $gqlPayload); + + // Create collection + $query = $this->getQuery(self::$CREATE_COLLECTION); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => $this->database['body']['data']['databasesCreate']['_id'], + 'collectionId' => 'unique()', + 'name' => 'Actors', + 'permission' => 'document', + 'read' => ['role:member'], + 'write' => ['role:member'], + ] + ]; + $this->collection = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'x-appwrite-key' => $this->getProject()['apiKey'], + ], $gqlPayload); + + // Create string attribute + $query = $this->getQuery(self::$CREATE_STRING_ATTRIBUTE); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => $this->database['body']['data']['databasesCreate']['_id'], + 'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'], + 'key' => 'name', + 'size' => 256, + 'required' => true, + ] + ]; + $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'x-appwrite-key' => $this->getProject()['apiKey'], + ], $gqlPayload); + + sleep(1); + } + + public function testInvalidAuth() + { + $projectId = $this->getProject()['$id']; + + // Create document as account 1 + $query = $this->getQuery(self::$CREATE_DOCUMENT); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => $this->database['body']['data']['databasesCreate']['_id'], + 'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'], + 'documentId' => 'unique()', + 'data' => [ + 'name' => 'John Doe', + ], + 'read' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']], + 'write' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']], + ] + ]; + $document = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'cookie' => 'a_session_' . $projectId . '=' . $this->token1, + ], $gqlPayload); + + // Try to read as account 1 + $query = $this->getQuery(self::$GET_DOCUMENT); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => $this->database['body']['data']['databasesCreate']['_id'], + 'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'], + 'documentId' => $document['body']['data']['databasesCreateDocument']['_id'], + ] + ]; + $document = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'cookie' => 'a_session_' . $projectId . '=' . $this->token1, + ], $gqlPayload); + + $this->assertIsArray($document['body']['data']['databasesGetDocument']); + $this->assertArrayNotHasKey('errors', $document['body']); + + // Try to read as account 2 + $document = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'cookie' => 'a_session_' . $projectId . '=' . $this->token2, + ], $gqlPayload); + + $message = 'No document found'; + $this->assertArrayHasKey('errors', $document['body']); + $this->assertEquals($message, $document['body']['errors'][0]['message']); + } + + public function testValidAuth() + { + $projectId = $this->getProject()['$id']; + + // Create document as account 1 + $query = $this->getQuery(self::$CREATE_DOCUMENT); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => $this->database['body']['data']['databasesCreate']['_id'], + 'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'], + 'documentId' => 'unique()', + 'data' => [ + 'name' => 'John Doe', + ], + 'read' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']], + 'write' => ['user:' . $this->account1['body']['data']['accountCreate']['_id']], + ] + ]; + $document = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'cookie' => 'a_session_' . $projectId . '=' . $this->token1, + ], $gqlPayload); + + // Try to delete as account 1 + $query = $this->getQuery(self::$DELETE_DOCUMENT); + $gqlPayload = [ + 'query' => $query, + 'variables' => [ + 'databaseId' => $this->database['body']['data']['databasesCreate']['_id'], + 'collectionId' => $this->collection['body']['data']['databasesCreateCollection']['_id'], + 'documentId' => $document['body']['data']['databasesCreateDocument']['_id'], + ] + ]; + $document = $this->client->call(Client::METHOD_POST, '/graphql', [ + 'content-type' => 'application/json', + 'x-appwrite-project' => $projectId, + 'cookie' => 'a_session_' . $projectId . '=' . $this->token1, + ], $gqlPayload); + + $this->assertEquals(204, $document['headers']['status-code']); + } +}