nosu
/
security-c4po
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: as a developer I want to edit projects

This commit is contained in:
Stipe-Knez 2022-03-08 11:12:56 +01:00
parent e4e5906211
commit da4aa144ff
4 changed files with 121 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
security-c4po-api/security-c4po-api.postman_collection.json
View File

@ -98,6 +98,45 @@
"url": null
},
"response": []
},
{
"name": "updateProject",
"request": {
"auth": {
"type": "oauth2",
"oauth2": [
{
"key": "addTokenTo",
"value": "header",
"type": "string"
}
]
},
"method": "PATCH",
"header": [],
"body": {
"mode": "raw",
"raw": "{\n \"client\": \"updatedProject\",\n \"title\": \"log4j pentest\",\n \"tester\" : \"Stipe\"\n}",
"options": {
"raw": {
"language": "json"
}
}
},
"url": {
"raw": "http://localhost:8443/projects/f2738715-4005-4aca-8d34-27ce9b8efffe",
"protocol": "http",
"host": [
"localhost"
],
"port": "8443",
"path": [
"projects",
"f2738715-4005-4aca-8d34-27ce9b8efffe"
]
}
},
"response": []
}
]
},

10
security-c4po-api/src/main/asciidoc/SecurityC4PO.adoc
View File

@ -77,22 +77,22 @@ To update a project, call the PATCH request /projects/{projectId}
==== Request example
include::{snippets}/deleteProject/http-request.adoc[]
include::{snippets}/updateProject/http-request.adoc[]
==== Response example
include::{snippets}/deleteProject/http-response.adoc[]
include::{snippets}/updateProject/http-response.adoc[]
==== Response structure
include::{snippets}/deleteProject/response-fields.adoc[]
include::{snippets}/updateProject/response-fields.adoc[]
== Change History
|===
|Date |Change
|2022-03-04
|Added PATCH endpoint to save Projects
|2022-03-07
|Added PATCH endpoint to update Projects
|2022-02-01
|Added DELETE endpoint to save Projects
|2021-12-22

50
security-c4po-api/src/test/kotlin/com/securityc4po/api/project/ProjectControllerDocumentationTest.kt
View File

@ -189,6 +189,56 @@ class ProjectControllerDocumentationTest : BaseDocumentationIntTest() {
)
}
@Nested
inner class UpdateProject {
@Test
fun updateProject() {
webTestClient.patch().uri("/projects/${projectUpdate.id}")
.header("Authorization", "Bearer $tokenAdmin")
.body(Mono.just(projectUpdate), ProjectRequestBody::class.java)
.exchange()
.expectStatus().isAccepted
.expectHeader().valueEquals("Application-Name", "SecurityC4PO")
.expectBody().json(Json.write(projectUpdate))
.consumeWith(
WebTestClientRestDocumentation.document(
"{methodName}",
Preprocessors.preprocessRequest(
Preprocessors.prettyPrint(),
Preprocessors.modifyUris().removePort(),
Preprocessors.removeHeaders("Host", "Content-Length")
),
Preprocessors.preprocessResponse(
Preprocessors.prettyPrint()
),
PayloadDocumentation.relaxedResponseFields(
PayloadDocumentation.fieldWithPath("id").type(JsonFieldType.STRING)
.description("The id of the updated project"),
PayloadDocumentation.fieldWithPath("client").type(JsonFieldType.STRING)
.description("The updated name of the client of the project"),
PayloadDocumentation.fieldWithPath("title").type(JsonFieldType.STRING)
.description("The updated title of the project"),
PayloadDocumentation.fieldWithPath("createdAt").type(JsonFieldType.STRING)
.description("The date where the project was created at"),
PayloadDocumentation.fieldWithPath("tester").type(JsonFieldType.STRING)
.description("The updated user that is assigned as a tester in the project"),
PayloadDocumentation.fieldWithPath("createdBy").type(JsonFieldType.STRING)
.description("The id of the user that created the project")
)
)
)
}
val projectUpdate = Project(
id = "4f6567a8-76fd-487b-8602-f82d0ca4d1f9",
client = "Novatec_updated",
title = "log4j Pentest_updated",
createdAt = "2021-01-10T18:05:00Z",
tester = "Stipe_updated",
createdBy = "f8aab31f-4925-4242-a6fa-f98135b4b032"
)
}
private fun persistBasicTestScenario() {
// setup test data
val projectOne = Project(

36
security-c4po-api/src/test/kotlin/com/securityc4po/api/project/ProjectControllerIntTest.kt
View File

@ -127,15 +127,7 @@ class ProjectControllerIntTest : BaseIntTest() {
.expectHeader().valueEquals("Application-Name", "SecurityC4PO")
.expectBody().json(Json.write(projectTwo.toProjectDeleteResponseBody()))
}
/*@Test
fun `delete project by non-existing id`() {
webTestClient.delete().uri("/projects/{id}", "98754a47-796b-4b3f-abf9-c46c668596c5")
.header("Authorization", "Bearer $tokenAdmin")
.exchange()
.expectStatus().isNoContent
.expectHeader().valueEquals("Application-Name", "SecurityC4PO")
.expectBody().isEmpty
}*/
val projectTwo = Project(
id = "61360a47-796b-4b3f-abf9-c46c668596c5",
client = "Allsafe",
@ -146,6 +138,32 @@ class ProjectControllerIntTest : BaseIntTest() {
)
}
@Nested
inner class UpdateProject {
@Test
fun `updated project successfully`() {
webTestClient.patch().uri("/projects/{id}", projectUpdate.id)
.header("Authorization", "Bearer $tokenAdmin")
.body(Mono.just(projectUpdate), ProjectRequestBody::class.java)
.exchange()
.expectStatus().isAccepted
.expectHeader().valueEquals("Application-Name", "SecurityC4PO")
.expectBody()
.jsonPath("$.client").isEqualTo("Novatec_updated")
.jsonPath("$.title").isEqualTo("log4j Pentest_updated")
.jsonPath("$.tester").isEqualTo("Stipe_updated")
}
val projectUpdate = Project(
id = "4f6567a8-76fd-487b-8602-f82d0ca4d1f9",
client = "Novatec_updated",
title = "log4j Pentest_updated",
createdAt = "2021-04-10T18:05:00Z",
tester = "Stipe_updated",
createdBy = "a8891ad2-5cf5-4519-a89e-9ef8eec9e10c"
)
}
private fun persistBasicTestScenario() {
// setup test data
val projectOne = Project(