1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
|
require 'spec_helper'
provider_class = Puppet::Type.type(:rabbitmq_user).provider(:rabbitmqctl)
describe provider_class do
let(:resource) do
Puppet::Type.type(:rabbitmq_user).new(
ensure: :present,
name: 'rmq_x',
password: 'secret',
provider: described_class.name
)
end
let(:provider) { provider_class.new(resource) }
let(:instance) { provider.class.instances.first }
before do
provider.class.stubs(:rabbitmqctl_list).with('users').returns(
"rmq_x [disk, storage]\nrmq_y [network, cpu, administrator]\nrmq_z []\n"
)
end
describe '#self.instances' do
it { expect(provider.class.instances.size).to eq(3) }
it 'returns an array of users' do
users = provider.class.instances.map(&:name)
expect(users).to match_array(%w[rmq_x rmq_y rmq_z])
end
it 'returns the expected tags' do
tags = provider.class.instances.first.get(:tags)
expect(tags).to match_array(%w[disk storage])
end
end
describe '#exists?' do
it { expect(instance.exists?).to be true }
end
describe '#create' do
it 'adds a user' do
provider.expects(:rabbitmqctl).with('add_user', 'rmq_x', 'secret')
provider.create
end
context 'no password supplied' do
let(:resource) do
Puppet::Type.type(:rabbitmq_user).new(
ensure: :present,
name: 'rmq_x'
)
end
it 'raises an error' do
expect do
provider.create
end.to raise_error(Puppet::Error, 'Password is a required parameter for rabbitmq_user (user: rmq_x)')
end
end
end
describe '#destroy' do
it 'removes a user' do
provider.expects(:rabbitmqctl).with('delete_user', 'rmq_x')
provider.destroy
end
end
describe '#check_password' do
context 'correct password' do
before do
provider.class.stubs(:rabbitmqctl).with(
'eval',
'rabbit_access_control:check_user_pass_login(list_to_binary("rmq_x"), list_to_binary("secret")).'
).returns <<-EOT
{ok,{user,<<"rmq_x">>,[],rabbit_auth_backend_internal,
{internal_user,<<"rmq_x">>,
<<193,81,62,182,129,135,196,89,148,87,227,48,86,2,154,
192,52,119,214,177>>,
[]}}}
EOT
end
it do
provider.check_password('secret')
end
end
context 'incorrect password' do
before do
provider.class.stubs(:rabbitmqctl).with(
'eval',
'rabbit_access_control:check_user_pass_login(list_to_binary("rmq_x"), list_to_binary("nottherightone")).'
).returns <<-EOT
{refused,"user '~s' - invalid credentials",[<<"rmq_x">>]}
...done.
EOT
end
it do
provider.check_password('nottherightone')
end
end
end
describe '#tags=' do
it 'clears all tags on existing user' do
provider.set(tags: %w[tag1 tag2 tag3])
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', [])
provider.tags = []
provider.flush
end
it 'sets multiple tags' do
provider.set(tags: [])
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', %w[tag1 tag2])
provider.tags = %w[tag1 tag2]
provider.flush
end
it 'clears tags while keeping admin tag' do
provider.set(tags: %w[administrator tag1 tag2])
resource[:admin] = true
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', ['administrator'])
provider.tags = []
provider.flush
end
it 'changes tags while keeping admin tag' do
provider.set(tags: %w[administrator tag1 tag2])
resource[:admin] = true
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', %w[tag1 tag7 tag3 administrator])
provider.tags = %w[tag1 tag7 tag3]
provider.flush
end
end
describe '#admin=' do
it 'gets admin value properly' do
provider.set(tags: %w[administrator tag1 tag2])
expect(provider.admin).to be :true
end
it 'gets false admin value' do
provider.set(tags: %w[tag1 tag2])
expect(provider.admin).to be :false
end
it 'sets admin value' do
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', ['administrator'])
resource[:admin] = true
provider.admin = resource[:admin]
provider.flush
end
it 'adds admin value to existing tags of the user' do
resource[:tags] = %w[tag1 tag2]
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', %w[tag1 tag2 administrator])
resource[:admin] = true
provider.admin = resource[:admin]
provider.flush
end
it 'unsets admin value' do
provider.set(tags: ['administrator'])
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', [])
provider.admin = :false
provider.flush
end
it 'does not interfere with existing tags on the user when unsetting admin value' do
provider.set(tags: %w[administrator tag1 tag2])
resource[:tags] = %w[tag1 tag2]
provider.expects(:rabbitmqctl).with('set_user_tags', 'rmq_x', %w[tag1 tag2])
provider.admin = :false
provider.flush
end
end
end
|
