using Bit.Core.AdminConsole.Entities; using Bit.Core.Entities; using Bit.Core.Enums; using Bit.Core.Exceptions; using Bit.Core.Models.Data; using Bit.Core.OrganizationFeatures.OrganizationCollections; using Bit.Core.Repositories; using Bit.Core.Services; using Bit.Core.Test.AutoFixture; using Bit.Core.Test.AutoFixture.OrganizationFixtures; using Bit.Test.Common.AutoFixture; using Bit.Test.Common.AutoFixture.Attributes; using NSubstitute; using Xunit; namespace Bit.Core.Test.OrganizationFeatures.OrganizationCollections; [SutProviderCustomize] [OrganizationCustomize] public class CreateCollectionCommandTests { [Theory, BitAutoData] public async Task CreateAsync_WithoutGroupsAndUsers_CreatesCollection( Organization organization, Collection collection, SutProvider sutProvider) { collection.Id = default; sutProvider.GetDependency() .GetByIdAsync(organization.Id) .Returns(organization); var utcNow = DateTime.UtcNow; await sutProvider.Sut.CreateAsync(collection, null, null); await sutProvider.GetDependency() .Received(1) .CreateAsync( collection, Arg.Is>(l => l == null), Arg.Is>(l => l == null)); await sutProvider.GetDependency() .Received(1) .LogCollectionEventAsync(collection, EventType.Collection_Created); Assert.True(collection.CreationDate - utcNow < TimeSpan.FromSeconds(1)); Assert.True(collection.RevisionDate - utcNow < TimeSpan.FromSeconds(1)); } [Theory, BitAutoData] public async Task CreateAsync_WithGroupsAndUsers_CreatesCollectionWithGroupsAndUsers( Organization organization, Collection collection, [CollectionAccessSelectionCustomize(true)] IEnumerable groups, IEnumerable users, SutProvider sutProvider) { collection.Id = default; organization.UseGroups = true; sutProvider.GetDependency() .GetByIdAsync(organization.Id) .Returns(organization); var utcNow = DateTime.UtcNow; await sutProvider.Sut.CreateAsync(collection, groups, users); await sutProvider.GetDependency() .Received(1) .CreateAsync( collection, Arg.Is>(l => l.Any(i => i.Manage == true)), Arg.Any>()); await sutProvider.GetDependency() .Received(1) .LogCollectionEventAsync(collection, EventType.Collection_Created); Assert.True(collection.CreationDate - utcNow < TimeSpan.FromSeconds(1)); Assert.True(collection.RevisionDate - utcNow < TimeSpan.FromSeconds(1)); } [Theory, BitAutoData] public async Task CreateAsync_WithOrganizationUseGroupDisabled_CreatesCollectionWithoutGroups( Organization organization, Collection collection, [CollectionAccessSelectionCustomize] IEnumerable groups, [CollectionAccessSelectionCustomize(true)] IEnumerable users, SutProvider sutProvider) { collection.Id = default; organization.UseGroups = false; sutProvider.GetDependency() .GetByIdAsync(organization.Id) .Returns(organization); var utcNow = DateTime.UtcNow; await sutProvider.Sut.CreateAsync(collection, groups, users); await sutProvider.GetDependency() .Received(1) .CreateAsync( collection, Arg.Is>(l => l == null), Arg.Is>(l => l.Any(i => i.Manage == true))); await sutProvider.GetDependency() .Received(1) .LogCollectionEventAsync(collection, EventType.Collection_Created); Assert.True(collection.CreationDate - utcNow < TimeSpan.FromSeconds(1)); Assert.True(collection.RevisionDate - utcNow < TimeSpan.FromSeconds(1)); } [Theory, BitAutoData] public async Task CreateAsync_WithNonExistingOrganizationId_ThrowsBadRequest( Collection collection, SutProvider sutProvider) { collection.Id = default; var ex = await Assert.ThrowsAsync(() => sutProvider.Sut.CreateAsync(collection)); Assert.Contains("Organization not found", ex.Message); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default, default, default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .LogCollectionEventAsync(default, default); } [Theory, BitAutoData] public async Task CreateAsync_WithoutManageAccess_ThrowsBadRequest( Organization organization, Collection collection, [CollectionAccessSelectionCustomize] IEnumerable users, SutProvider sutProvider) { collection.Id = default; organization.AllowAdminAccessToAllCollectionItems = false; sutProvider.GetDependency() .GetByIdAsync(organization.Id) .Returns(organization); var ex = await Assert.ThrowsAsync(() => sutProvider.Sut.CreateAsync(collection, null, users)); Assert.Contains("At least one member or group must have can manage permission.", ex.Message); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default, default, default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .LogCollectionEventAsync(default, default); } [Theory, BitAutoData] public async Task CreateAsync_WithExceedsOrganizationMaxCollections_ThrowsBadRequest( Organization organization, Collection collection, [CollectionAccessSelectionCustomize(true)] IEnumerable users, SutProvider sutProvider) { collection.Id = default; sutProvider.GetDependency() .GetByIdAsync(organization.Id) .Returns(organization); sutProvider.GetDependency() .GetCountByOrganizationIdAsync(organization.Id) .Returns(organization.MaxCollections.Value); var ex = await Assert.ThrowsAsync(() => sutProvider.Sut.CreateAsync(collection, null, users)); Assert.Equal($@"You have reached the maximum number of collections ({organization.MaxCollections.Value}) for this organization.", ex.Message); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default, default, default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .LogCollectionEventAsync(default, default); } [Theory, BitAutoData] public async Task CreateAsync_WithInvalidManageAssociations_ThrowsBadRequest( Organization organization, Collection collection, SutProvider sutProvider) { collection.Id = default; sutProvider.GetDependency() .GetByIdAsync(organization.Id) .Returns(organization); var invalidGroups = new List { new() { Id = Guid.NewGuid(), Manage = true, ReadOnly = true } }; var ex = await Assert.ThrowsAsync(() => sutProvider.Sut.CreateAsync(collection, invalidGroups, null)); Assert.Contains("The Manage property is mutually exclusive and cannot be true while the ReadOnly or HidePasswords properties are also true.", ex.Message); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .CreateAsync(default, default, default); await sutProvider.GetDependency() .DidNotReceiveWithAnyArgs() .LogCollectionEventAsync(default, default); } }