public async Task DontHandleNonAuthenticated()
{
// Arrange
var context = PermissionHandlerHelper.CreateTestAuthorizationHandlerContext(new Permission("Allowed"), new[] { "Allowed" });
var permissionHandler = CreatePermissionHandler();
// Act
await permissionHandler.HandleAsync(context);
// Assert
Assert.False(context.HasSucceeded);
}
public async Task GrantsClaimsPermissions(string required, bool success)
{
// Arrange
var context = PermissionHandlerHelper.CreateTestAuthorizationHandlerContext(new Permission(required), new[] { "Allowed" }, true);
var permissionHandler = CreatePermissionHandler();
// Act
await permissionHandler.HandleAsync(context);
// Assert
Assert.Equal(success, context.HasSucceeded);
}
public async Task IsCaseInsensitive()
{
// Arrange
var required = new Permission("required");
var context = PermissionHandlerHelper.CreateTestAuthorizationHandlerContext(required, new[] { "ReQuIrEd" }, true);
var permissionHandler = CreatePermissionHandler();
// Act
await permissionHandler.HandleAsync(context);
// Assert
Assert.True(context.HasSucceeded);
}
public async Task DontRevokeExistingGrants()
{
// Arrange
var context = PermissionHandlerHelper.CreateTestAuthorizationHandlerContext(new Permission("Required"), new[] { "Other" }, true);
var permissionHandler = CreatePermissionHandler();
await context.SuccessAsync("Required");
// Act
await permissionHandler.HandleAsync(context);
// Assert
Assert.True(context.HasSucceeded);
}
public async Task GrantsInheritedPermissions()
{
// Arrange
var level2 = new Permission("Implicit2");
var level1 = new Permission("Implicit1", "Foo", new[] { level2 });
var required = new Permission("Required", "Foo", new[] { level1 });
var context = PermissionHandlerHelper.CreateTestAuthorizationHandlerContext(required, new[] { "Implicit2" }, true);
var permissionHandler = CreatePermissionHandler();
// Act
await permissionHandler.HandleAsync(context);
// Assert
Assert.True(context.HasSucceeded);
}