@kilterset/auth0-actions-testing/dist/test/api/access.test.js

Test and develop Auth0 Actions or Okta CIC Actions locally.

"use strict";
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
const node_test_1 = __importDefault(require("node:test"));
const access_1 = require("../../mock/api/access");
const node_assert_1 = require("node:assert");
(0, node_test_1.default)("access mock", (t) => __awaiter(void 0, void 0, void 0, function* () {
    const baseApi = Symbol("Base API");
    yield t.test("allowed", (t) => __awaiter(void 0, void 0, void 0, function* () {
        const { build, state } = (0, access_1.accessMock)("Another Flow");
        const api = build(baseApi);
        (0, node_assert_1.ok)(!state.denied, "Expected access to be allowed");
    }));
    yield t.test("denied", (t) => __awaiter(void 0, void 0, void 0, function* () {
        const { build, state } = (0, access_1.accessMock)("Another Flow");
        const api = build(baseApi);
        (0, node_assert_1.strictEqual)(api.deny("Must be an admin"), baseApi, "Expected base api to be returned");
        (0, node_assert_1.ok)(state.denied, "Expected access to be denied");
        (0, node_assert_1.strictEqual)(state.denied.reason, "Must be an admin", "Expected reason to be set");
    }));
    yield t.test("CredentialsExchange", (t) => __awaiter(void 0, void 0, void 0, function* () {
        yield t.test("allowed", (t) => __awaiter(void 0, void 0, void 0, function* () {
            const { build, state } = (0, access_1.accessMock)("CredentialsExchange");
            const api = build(baseApi);
            (0, node_assert_1.ok)(!state.denied, "Expected access to be allowed");
        }));
        yield t.test("denied", (t) => __awaiter(void 0, void 0, void 0, function* () {
            const { build, state } = (0, access_1.accessMock)("CredentialsExchange");
            const api = build(baseApi);
            (0, node_assert_1.strictEqual)(api.deny("invalid_scope", "Must be an admin"), baseApi, "Expected base api to be returned");
            (0, node_assert_1.ok)(state.denied, "Expected access to be denied");
            (0, node_assert_1.strictEqual)(state.denied.code, "invalid_scope", "Expected code to be set");
            (0, node_assert_1.strictEqual)(state.denied.reason, "Must be an admin", "Expected reason to be set");
        }));
    }));
}));
//# sourceMappingURL=access.test.js.map