@authzed/authzed-js-node
Version:
authzed js client for nodejs
72 lines (71 loc) • 2.92 kB
JavaScript
import { ClientSecurity } from "./util.js";
import * as v1 from "./v1.js";
import { Consistency } from "./v1.js";
import { generateTestToken } from "./__utils__/helpers.js";
import { describe, it, expect } from "vitest";
describe("a check following a write of schema and relationships", () => {
it("should succeed", () => new Promise((done) => {
// Write the schema.
const token = generateTestToken("full-test");
const v1client = v1.NewClient(token, "localhost:50051", ClientSecurity.INSECURE_LOCALHOST_ALLOWED);
const writeSchemaRequest = v1.WriteSchemaRequest.create({
schema: `
definition test/user {}
definition test/resource {
relation viewer: test/user
permission view = viewer
}
`,
});
v1client.writeSchema(writeSchemaRequest, function (err) {
expect(err).toBe(null);
// Create the relationship between the resource and the user.
const resource = v1.ObjectReference.create({
objectType: "test/resource",
objectId: "someresource",
});
// Create the user reference.
const userref = v1.ObjectReference.create({
objectType: "test/user",
objectId: "someuser",
});
const user = v1.SubjectReference.create({
object: userref,
});
const relationship = v1.Relationship.create({
resource,
relation: "viewer",
subject: user,
});
const update = v1.RelationshipUpdate.create({
operation: v1.RelationshipUpdate_Operation.CREATE,
relationship: relationship,
});
// Write the relationship.
const writeRequest = v1.WriteRelationshipsRequest.create({
updates: [update],
});
v1client.writeRelationships(writeRequest, function (err, response) {
expect(err).toBe(null);
expect(response).toBeTruthy();
const checkPermissionRequest = v1.CheckPermissionRequest.create({
resource,
permission: "view",
subject: user,
consistency: Consistency.create({
requirement: {
oneofKind: "fullyConsistent",
fullyConsistent: true,
},
}),
});
v1client.checkPermission(checkPermissionRequest, (err, response) => {
expect(err).toBe(null);
expect(response?.permissionship).toBe(v1.CheckPermissionResponse_Permissionship.HAS_PERMISSION);
done();
});
});
});
}));
});
//# sourceMappingURL=full.test.js.map