mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-05-01 04:50:16 +00:00
5c54685f04
Introduces granular permission scopes for API tokens (docker:report, docker:manage, host-agent:report, monitoring:read/write, settings:read/write) allowing tokens to be restricted to minimum required access. Legacy tokens default to full access until scopes are explicitly configured. Adds standalone host agent for monitoring Linux, macOS, and Windows servers outside Proxmox/Docker estates. New Servers workspace in UI displays uptime, OS metadata, and capacity metrics from enrolled agents. Includes comprehensive token management UI overhaul with scope presets, inline editing, and visual scope indicators.
52 lines
1.5 KiB
Go
52 lines
1.5 KiB
Go
package api
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/rcourtman/pulse-go-rewrite/internal/config"
|
|
)
|
|
|
|
func TestNormalizeRequestedScopesDefaultsToWildcard(t *testing.T) {
|
|
scopes, err := normalizeRequestedScopes(nil)
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %v", err)
|
|
}
|
|
if len(scopes) != 1 || scopes[0] != config.ScopeWildcard {
|
|
t.Fatalf("expected wildcard scope, got %#v", scopes)
|
|
}
|
|
}
|
|
|
|
func TestNormalizeRequestedScopesValidList(t *testing.T) {
|
|
raw := []string{"docker:report", "docker:report", "monitoring:read"}
|
|
scopes, err := normalizeRequestedScopes(&raw)
|
|
if err != nil {
|
|
t.Fatalf("unexpected error: %v", err)
|
|
}
|
|
if len(scopes) != 2 {
|
|
t.Fatalf("expected 2 scopes, got %d", len(scopes))
|
|
}
|
|
if scopes[0] != config.ScopeDockerReport || scopes[1] != config.ScopeMonitoringRead {
|
|
t.Fatalf("unexpected scopes order: %#v", scopes)
|
|
}
|
|
}
|
|
|
|
func TestNormalizeRequestedScopesRejectsMixedWildcard(t *testing.T) {
|
|
raw := []string{"*", "docker:report"}
|
|
if _, err := normalizeRequestedScopes(&raw); err == nil {
|
|
t.Fatal("expected error when mixing wildcard with explicit scopes")
|
|
}
|
|
}
|
|
|
|
func TestNormalizeRequestedScopesRejectsUnknown(t *testing.T) {
|
|
raw := []string{"unknown"}
|
|
if _, err := normalizeRequestedScopes(&raw); err == nil {
|
|
t.Fatal("expected error for unknown scope")
|
|
}
|
|
}
|
|
|
|
func TestNormalizeRequestedScopesRejectsEmpty(t *testing.T) {
|
|
raw := []string{}
|
|
if _, err := normalizeRequestedScopes(&raw); err == nil {
|
|
t.Fatal("expected error for empty scopes array")
|
|
}
|
|
}
|