paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 47 Packages Projects Releases Wiki Activity

permission-backend: improve request validation

Browse Source 
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
This commit is contained in:
Vincenzo Scamporlino
2025-04-10 12:50:09 +02:00
parent 9692c85d7e
commit a5656fd532
1 changed files with 69 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/permission-backend/src/service/router.test.ts
+69
View File
@@ -881,6 +881,75 @@ describe('createRouter', () => {
},
],
},
{
items: [
{
id: '123',
resourceRef: ['resource:1'],
permission: {
type: 'resource',
name: 'test.permission',
attributes: {},
resourceType: 'test-resource-1',
},
},
],
},
{
items: [
{
id: '123',
resourceRefs: 'resource:1',
permission: {
type: 'resource',
name: 'test.permission',
attributes: {},
resourceType: 'test-resource-1',
},
},
],
},
{
items: [
{
id: '123',
resourceRefs: ['resource:1'],
resourceRef: 'resource:1',
permission: {
type: 'resource',
name: 'test.permission',
attributes: {},
resourceType: 'test-resource-1',
},
},
],
},
{
items: [
{
id: '123',
resourceRefs: ['resource:1'],
permission: {
type: 'basic',
name: 'test.permission',
attributes: {},
},
},
],
},
{
items: [
{
id: '123',
resourceRef: 'resource:1',
permission: {
type: 'basic',
name: 'test.permission',
attributes: {},
},
},
],
},
])('returns a 400 error for invalid request %#', async requestBody => {
const response = await request(app).post('/authorize').send(requestBody);