github.com/mook-as/cf-cli@v7.0.0-beta.28.0.20200120190804-b91c115fae48+incompatible/integration/v6/isolated/create_user_command_test.go

package isolated

import (
	"code.cloudfoundry.org/cli/integration/helpers"
	. "github.com/onsi/ginkgo"
	. "github.com/onsi/ginkgo/extensions/table"
	. "github.com/onsi/gomega"
	. "github.com/onsi/gomega/gbytes"
	. "github.com/onsi/gomega/gexec"
)

var _ = Describe("create-user command", func() {
	Describe("help", func() {
		When("--help flag is set", func() {
			It("Displays command usage to output", func() {
				session := helpers.CF("create-user", "--help")
				Eventually(session).Should(Say("NAME:"))
				Eventually(session).Should(Say("create-user - Create a new user"))
				Eventually(session).Should(Say("USAGE:"))
				Eventually(session).Should(Say("cf create-user USERNAME PASSWORD"))
				Eventually(session).Should(Say("cf create-user USERNAME --origin ORIGIN"))
				Eventually(session).Should(Say("EXAMPLES:"))
				Eventually(session).Should(Say("   cf create-user j.smith@example.com S3cr3t                  # internal user"))
				Eventually(session).Should(Say("   cf create-user j.smith@example.com --origin ldap           # LDAP user"))
				Eventually(session).Should(Say("   cf create-user j.smith@example.com --origin provider-alias # SAML or OpenID Connect federated user"))
				Eventually(session).Should(Say("OPTIONS:"))
				Eventually(session).Should(Say("--origin      Origin for mapping a user account to a user in an external identity provider"))
				Eventually(session).Should(Say("SEE ALSO:"))
				Eventually(session).Should(Say("passwd, set-org-role, set-space-role"))
				Eventually(session).Should(Exit(0))
			})
		})
	})

	When("the environment is not setup correctly", func() {
		It("fails with the appropriate errors", func() {
			helpers.CheckEnvironmentTargetedCorrectly(false, false, ReadOnlyOrg, "create-user", "username", "password")
		})
	})

	When("the environment is setup correctly", func() {
		When("the logged in user is not authorized to create new users", func() {
			var (
				newUser     string
				newPassword string
			)

			BeforeEach(func() {
				helpers.LoginCF()
				noobUser := helpers.NewUsername()
				noobPassword := helpers.NewPassword()
				session := helpers.CF("create-user", noobUser, noobPassword)
				Eventually(session).Should(Exit(0))
				helpers.LogoutCF()

				env := map[string]string{
					"CF_USERNAME": noobUser,
					"CF_PASSWORD": noobPassword,
				}
				session = helpers.CFWithEnv(env, "auth")
				Eventually(session).Should(Exit(0))

				newUser = helpers.NewUsername()
				newPassword = helpers.NewPassword()
			})

			It("fails with insufficient scope error", func() {
				session := helpers.CF("create-user", newUser, newPassword)
				Eventually(session).Should(Say(`Creating user %s\.\.\.`, newUser))
				Eventually(session).Should(Say(`Error creating user %s\.`, newUser))
				Eventually(session.Err).Should(Say(`You are not authorized to perform the requested action\.`))
				Eventually(session).Should(Say("FAILED"))
				Eventually(session).Should(Exit(1))
			})
		})

		When("the logged in user is authorized to create new users", func() {
			BeforeEach(func() {
				helpers.LoginCF()
			})

			When("passed invalid username", func() {
				DescribeTable("when passed funkyUsername",
					func(funkyUsername string) {
						session := helpers.CF("create-user", funkyUsername, helpers.NewPassword())
						Eventually(session).Should(Say("Error creating user %s.", funkyUsername))
						Eventually(session.Err).Should(Say("Username must match pattern: \\[\\\\p\\{L\\}\\+0\\-9\\+\\\\\\-_\\.@'!\\]\\+"))
						Eventually(session).Should(Say("FAILED"))
						Eventually(session).Should(Exit(1))
					},

					Entry("fails when passed an emoji", "😀"),
					Entry("fails when passed a backtick", "`"),
				)

				When("the username is empty", func() {
					It("fails with a username must be provided error", func() {
						session := helpers.CF("create-user", "", helpers.NewPassword())
						Eventually(session).Should(Say("Error creating user ."))
						Eventually(session.Err).Should(Say("A username must be provided."))
						Eventually(session).Should(Say("FAILED"))
						Eventually(session).Should(Exit(1))
					})
				})
			})

			When("the user passes in an origin flag", func() {
				When("the origin is UAA", func() {
					When("password is not present", func() {
						It("errors and prints usage", func() {
							newUser := helpers.NewUsername()
							session := helpers.CF("create-user", newUser, "--origin", "UAA")
							Eventually(session.Err).Should(Say("Incorrect Usage: the required argument `PASSWORD` was not provided"))
							Eventually(session).Should(Say("FAILED"))
							Eventually(session).Should(Say("USAGE"))
							Eventually(session).Should(Exit(1))
						})
					})
				})
				When("the origin is the empty string", func() {
					When("password is not present", func() {
						It("errors and prints usage", func() {
							newUser := helpers.NewUsername()
							session := helpers.CF("create-user", newUser, "--origin", "")
							Eventually(session.Err).Should(Say("Incorrect Usage: the required argument `PASSWORD` was not provided"))
							Eventually(session).Should(Say("FAILED"))
							Eventually(session).Should(Say("USAGE"))
							Eventually(session).Should(Exit(1))
						})
					})
				})

				When("the origin is not UAA or empty", func() {
					It("creates the new user in the specified origin", func() {
						newUser := helpers.NewUsername()
						session := helpers.CF("create-user", newUser, "--origin", "ldap")
						Eventually(session).Should(Say("Creating user %s...", newUser))
						Eventually(session).Should(Say("OK"))
						Eventually(session).Should(Say("TIP: Assign roles with 'cf set-org-role' and 'cf set-space-role'"))
						Eventually(session).Should(Exit(0))
					})
				})

				When("argument for flag is not present", func() {
					It("fails with incorrect usage error", func() {
						session := helpers.CF("create-user", helpers.NewUsername(), "--origin")
						Eventually(session.Err).Should(Say("Incorrect Usage: expected argument for flag `--origin'"))
						Eventually(session).Should(Exit(1))
					})
				})
			})

			When("password is not present", func() {
				It("fails with incorrect usage error", func() {
					session := helpers.CF("create-user", helpers.NewUsername())
					Eventually(session.Err).Should(Say("Incorrect Usage: the required argument `PASSWORD` was not provided"))
					Eventually(session).Should(Say("FAILED"))
					Eventually(session).Should(Say("USAGE"))
					Eventually(session).Should(Exit(1))
				})
			})

			When("the user already exists", func() {
				var (
					newUser     string
					newPassword string
				)

				BeforeEach(func() {
					newUser = helpers.NewUsername()
					newPassword = helpers.NewPassword()
					session := helpers.CF("create-user", newUser, newPassword)
					Eventually(session).Should(Exit(0))
				})

				It("fails with the user already exists message", func() {
					session := helpers.CF("create-user", newUser, newPassword)
					Eventually(session.Err).Should(Say("user %s already exists", newUser))
					Eventually(session).Should(Say("OK"))
					Eventually(session).Should(Exit(0))
				})
			})

			When("the user does not already exist", func() {
				It("creates the new user", func() {
					newUser := helpers.NewUsername()
					newPassword := helpers.NewPassword()
					session := helpers.CF("create-user", newUser, newPassword)
					Eventually(session).Should(Say("Creating user %s...", newUser))
					Eventually(session).Should(Say("OK"))
					Eventually(session).Should(Say("TIP: Assign roles with 'cf set-org-role' and 'cf set-space-role'"))
					Eventually(session).Should(Exit(0))
				})
			})
		})
	})
})