keys ui WIP

test/test_api_security.py

@@ -48,7 +48,8 @@ from endpoints.api.permission import (RepositoryUserPermission, RepositoryTeamPe
 from endpoints.api.superuser import (SuperUserLogs, SuperUserList, SuperUserManagement,
                                      SuperUserSendRecoveryEmail, ChangeLog,
                                      SuperUserOrganizationManagement, SuperUserOrganizationList,
-                                     SuperUserAggregateLogs)
+                                     SuperUserAggregateLogs, SuperUserServiceKeyManagement,
+                                     SuperUserServiceKeyUpdater, SuperUserServiceKeyApproval)
 from endpoints.api.secscan import RepositoryImageSecurity
 
 
@@ -3911,6 +3912,66 @@ class TestSuperUserSendRecoveryEmail(ApiTestCase):
     self._run_test('POST', 404, 'devtable', None)
 
 
+class TestSuperUserServiceKeyManagement(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(SuperUserServiceKeyManagement)
+
+  def test_get_anonymous(self):
+    self._run_test('GET', 403, None, None)
+
+  def test_get_freshuser(self):
+    self._run_test('GET', 403, 'freshuser', None)
+
+  def test_get_reader(self):
+    self._run_test('GET', 403, 'reader', None)
+
+  def test_get_devtable(self):
+    self._run_test('GET', 200, 'devtable', None)
+
+  def test_post_anonymous(self):
+    self._run_test('POST', 401, None, dict(service='someservice', expiration=None))
+
+  def test_post_freshuser(self):
+    self._run_test('POST', 403, 'freshuser', dict(service='someservice', expiration=None))
+
+  def test_post_reader(self):
+    self._run_test('POST', 403, 'reader', dict(service='someservice', expiration=None))
+
+  def test_post_devtable(self):
+    self._run_test('POST', 200, 'devtable', dict(service='someservice', expiration=None))
+
+
+class TestSuperUserServiceKeyUpdater(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(SuperUserServiceKeyUpdater, kid=1234)
+
+  def test_delete_anonymous(self):
+    self._run_test('DELETE', 401, None, None)
+
+  def test_delete_freshuser(self):
+    self._run_test('DELETE', 403, 'freshuser', None)
+
+  def test_delete_reader(self):
+    self._run_test('DELETE', 403, 'reader', None)
+
+  def test_delete_devtable(self):
+    self._run_test('DELETE', 400, 'devtable', None)
+
+  def test_put_anonymous(self):
+    self._run_test('PUT', 401, None, {})
+
+  def test_put_freshuser(self):
+    self._run_test('PUT', 403, 'freshuser', {})
+
+  def test_put_reader(self):
+    self._run_test('PUT', 403, 'reader', {})
+
+  def test_put_devtable(self):
+    self._run_test('PUT', 404, 'devtable', {})
+
+
 class TestTeamMemberInvite(ApiTestCase):
   def setUp(self):
     ApiTestCase.setUp(self)