Initial QSfera import

Server/services/graph/pkg/validate/libregraph_test.go

@@ -0,0 +1,171 @@
+package validate_test
+
+import (
+	"context"
+	"time"
+
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+	libregraph "github.com/opencloud-eu/libre-graph-api-go"
+
+	"github.com/qsfera/server/pkg/conversions"
+	"github.com/qsfera/server/services/graph/pkg/unifiedrole"
+	"github.com/qsfera/server/services/graph/pkg/validate"
+)
+
+type validatableFactory[T any] func() (T, bool)
+
+var _ = Describe("libregraph", func() {
+	var ctx context.Context
+	var driveItemInvite libregraph.DriveItemInvite
+	var driveRecipient libregraph.DriveRecipient
+
+	BeforeEach(func() {
+		ctx = context.Background()
+		driveRecipient = libregraph.DriveRecipient{
+			ObjectId:                conversions.ToPointer("1"),
+			LibreGraphRecipientType: conversions.ToPointer("user"),
+		}
+
+		driveItemInvite = libregraph.DriveItemInvite{
+			Recipients:                   []libregraph.DriveRecipient{driveRecipient},
+			Roles:                        []string{unifiedrole.UnifiedRoleEditorID},
+			LibreGraphPermissionsActions: []string{unifiedrole.DriveItemVersionsUpdate},
+			ExpirationDateTime:           libregraph.PtrTime(time.Now().Add(time.Hour)),
+		}
+	})
+
+	DescribeTable("DriveItemInvite",
+		func(factories ...validatableFactory[libregraph.DriveItemInvite]) {
+			for _, factory := range factories {
+				s, pass := factory()
+				switch err := validate.StructCtx(ctx, s); pass {
+				case false:
+					Expect(err).To(HaveOccurred())
+				default:
+					Expect(err).ToNot(HaveOccurred())
+				}
+			}
+		},
+		Entry("succeed: roles only", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.LibreGraphPermissionsActions = nil
+			return driveItemInvite, true
+		}),
+		Entry("succeed: actions only", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			return driveItemInvite, true
+		}),
+		Entry("succeed: no ExpirationDateTime", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.ExpirationDateTime = nil
+			return driveItemInvite, true
+		}),
+		Entry("fail: multiple role assignment", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = []string{
+				unifiedrole.UnifiedRoleEditorID,
+				unifiedrole.UnifiedRoleManagerID,
+			}
+			driveItemInvite.LibreGraphPermissionsActions = nil
+			return driveItemInvite, false
+		}),
+		Entry("fail: unknown role", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = []string{"foo"}
+			driveItemInvite.LibreGraphPermissionsActions = nil
+			return driveItemInvite, false
+		}),
+		Entry("fail: disabled role", func() (libregraph.DriveItemInvite, bool) {
+			ctx = validate.ContextWithAllowedRoleIDs(ctx, []string{unifiedrole.UnifiedRoleEditorID})
+			driveItemInvite.Roles = []string{
+				unifiedrole.UnifiedRoleSecureViewerID,
+			}
+			driveItemInvite.LibreGraphPermissionsActions = nil
+			return driveItemInvite, false
+		}),
+		Entry("fail: unknown action", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.LibreGraphPermissionsActions = []string{"foo"}
+			return driveItemInvite, false
+		}),
+		Entry("fail: missing roles or permission actions", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.LibreGraphPermissionsActions = nil
+			return driveItemInvite, false
+		}),
+		Entry("fail: different number of roles and actions", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.LibreGraphPermissionsActions = []string{
+				unifiedrole.DriveItemVersionsUpdate,
+				unifiedrole.DriveItemChildrenCreate,
+			}
+			return driveItemInvite, false
+		}),
+		Entry("fail: missing recipients", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.Recipients = nil
+			return driveItemInvite, false
+		}),
+		Entry("fail: dive recipients", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.Recipients = []libregraph.DriveRecipient{
+				{ObjectId: libregraph.PtrString("1"), LibreGraphRecipientType: libregraph.PtrString("dive")},
+			}
+			return driveItemInvite, false
+		}),
+		Entry("fail: more than 1 recipient", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.Recipients = []libregraph.DriveRecipient{
+				driveRecipient,
+				{ObjectId: libregraph.PtrString("2"), LibreGraphRecipientType: libregraph.PtrString("group")},
+			}
+			return driveItemInvite, false
+		}),
+		Entry("fail: expirationDateTime in the past", func() (libregraph.DriveItemInvite, bool) {
+			driveItemInvite.Roles = nil
+			driveItemInvite.ExpirationDateTime = libregraph.PtrTime(time.Now().Add(-time.Hour))
+			return driveItemInvite, false
+		}),
+	)
+
+	DescribeTable("DriveRecipient",
+		func(factories ...validatableFactory[libregraph.DriveRecipient]) {
+			for _, factory := range factories {
+				s, pass := factory()
+				switch err := validate.StructCtx(context.Background(), s); pass {
+				case false:
+					Expect(err).To(HaveOccurred())
+				default:
+					Expect(err).ToNot(HaveOccurred())
+				}
+			}
+		},
+		Entry("fail: invalid objectId",
+			func() (libregraph.DriveRecipient, bool) {
+				driveRecipient.ObjectId = nil
+				return driveRecipient, false
+			},
+			func() (libregraph.DriveRecipient, bool) {
+				driveRecipient.ObjectId = conversions.ToPointer("")
+				return driveRecipient, false
+			},
+		),
+		Entry("succeed: valid role",
+			func() (libregraph.DriveRecipient, bool) {
+				driveRecipient.LibreGraphRecipientType = conversions.ToPointer("user")
+				return driveRecipient, true
+			},
+			func() (libregraph.DriveRecipient, bool) {
+				driveRecipient.LibreGraphRecipientType = conversions.ToPointer("group")
+				return driveRecipient, true
+			},
+		),
+		Entry("fail: invalid role",
+			func() (libregraph.DriveRecipient, bool) {
+				driveRecipient.LibreGraphRecipientType = conversions.ToPointer("foo")
+				return driveRecipient, false
+			},
+			func() (libregraph.DriveRecipient, bool) {
+				driveRecipient.LibreGraphRecipientType = nil
+				return driveRecipient, false
+			},
+		),
+	)
+})