public void Should_not_log_authorisation_failures_when_prevented_by_configuration()
{
PackageInstallationSettings.MuteAuthorisationFailureLogging = true;
RequestAuthoriser.IsAllowed();
Logger.Verify(x => x.Write(It.IsAny <string>()), Times.Never());
}
public HttpRequestAuthoriserLoggingRemoteAccessBehaviour()
{
CheckRequests
.Setup(x => x.IsLocal)
.Returns(false);
PackageInstallationSettings.AllowRemoteAccess = false;
RequestAuthoriser.IsAllowed();
}
public HttpRequestAuthoriserLoggingWhitelistBehaviour()
{
PackageInstallationSettings.AddressWhitelist.Add("123.456.0.1");
_userHostAddress = "123.456.0.2";
CheckRequests.Setup(x => x.UserHostAddress).Returns(_userHostAddress);
RequestAuthoriser.IsAllowed();
}
public void Should_return_false_when_configuration_settings_enabled_is_false()
{
// Arrange
PackageInstallationSettings.IsEnabled = false;
// Act
var isAllowed = RequestAuthoriser.IsAllowed();
// Assert
Assert.False(isAllowed);
}
public void Should_return_true_for_allowed_request()
{
// Arrange
PackageInstallationSettings.IsEnabled = true;
CheckRequests.Setup(x => x.IsLocal).Returns(true);
// Act
var isAllowed = RequestAuthoriser.IsAllowed();
// Assert
Assert.True(isAllowed);
}
public void Should_return_false_when_remote_request_is_disallowed_by_configuration_settings()
{
// Arrange
PackageInstallationSettings.IsEnabled = false;
PackageInstallationSettings.AllowRemoteAccess = false;
CheckRequests.Setup(x => x.IsLocal).Returns(false);
// Act
var isAllowed = RequestAuthoriser.IsAllowed();
// Assert
Assert.False(isAllowed);
}
public void Should_return_true_if_whitelist_exists_and_does_contain_requesting_ip()
{
// Arrange
PackageInstallationSettings.IsEnabled = true;
PackageInstallationSettings.AddressWhitelist = new List <string> {
"1.2.3.4"
};
CheckRequests.Setup(x => x.IsLocal).Returns(true);
CheckRequests.Setup(x => x.UserHostAddress).Returns("1.2.3.4");
// Act
var isAllowed = RequestAuthoriser.IsAllowed();
// Assert
Assert.True(isAllowed);
}
public HttpRequestAuthoriserLoggingDisabledBehaviour()
{
PackageInstallationSettings.IsEnabled = false;
RequestAuthoriser.IsAllowed();
}
public HttpRequestAuthoriserLoggingBehaviour()
{
RequestAuthoriser.IsAllowed();
}
public void Should_log_authorisation_failures_by_default()
{
RequestAuthoriser.IsAllowed();
Logger.Verify(x => x.Write(It.IsAny <string>()), Times.Once());
}
