add skeleton for impersonation api tests

Author: stephenarosaj

test/integration/data-connect.spec.ts

@@ -129,6 +129,76 @@ describe('getDataConnect()', () => {
     }
   ];
 
+  const optsAuthorizedFredClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      authClaims: {
+        sub: userId,
+        email_verified: true
+      }
+    }
+  };
+
+  const optsNonExistingClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      authClaims: {
+        sub: 'non-exisiting-id',
+        email_verified: true
+      }
+    }
+  };
+
+  const optsUnauthorizedClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      unauthenticated: true
+    }
+  };
+
+  const optsAuthorizedClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      authClaims: {
+        sub: userId,
+        email_verified: true,
+        firebase: {
+          identities: { who: 'me' },
+          sign_in_provider: 'google.com'
+        }
+      }
+    }
+  };
+  const optsNonExistingClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      authClaims: {
+        sub: 'non-exisiting-id',
+        email_verified: true,
+        firebase: {
+          identities: { who: 'me' },
+          sign_in_provider: 'google.com'
+        }
+      }
+    }
+  };
+  const optsAnonymousClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      authClaims: {
+        sub: userId,
+        email_verified: true,
+        firebase: {
+          identities: { who: 'me' },
+          sign_in_provider: 'anonymous'
+        }
+      }
+    }
+  };
+  const optsUnverifiedClaims: GraphqlOptions<undefined> = {
+    impersonate: {
+      authClaims: {
+        sub: 'non-exisiting-id',
+        email_verified: false
+      }
+    }
+  };
+
+
   describe('executeGraphql()', () => {
     it('executeGraphql() successfully executes a GraphQL mutation', async () => {
       const resp = await getDataConnect(connectorConfig).executeGraphql<UserUpsertResponse, unknown>(
@@ -193,30 +263,6 @@ describe('getDataConnect()', () => {
   });
 
   describe('executeGraphql* Impersonation', () => {
-    const optsAuthorizedFredClaims: GraphqlOptions<undefined> = {
-      impersonate: {
-        authClaims: {
-          sub: userId,
-          email_verified: true
-        }
-      }
-    };
-
-    const optsNonExistingClaims: GraphqlOptions<undefined> = {
-      impersonate: {
-        authClaims: {
-          sub: 'non-exisiting-id',
-          email_verified: true
-        }
-      }
-    };
-
-    const optsUnauthorizedClaims: GraphqlOptions<undefined> = {
-      impersonate: {
-        unauthenticated: true
-      }
-    };
-
     describe('USER Auth Policy', () => {
       it('executeGraphqlRead() successfully executes an impersonated query with authenticated claims', async () => {
         const resp =
@@ -341,4 +387,57 @@ describe('getDataConnect()', () => {
         });
     });
   });
+
+  describe('impersonateQuery()', () => {
+    const impersonateConnectorConfig: ConnectorConfig = { ...connectorConfig, connector: 'my-connector' };
+    describe('with unauthenticated impersonation', () => {
+      it('should successfully execute a query with @auth(level: PUBLIC)', () => {
+        return getDataConnect(impersonateConnectorConfig).impersonateQuery({})
+          .should.eventually.be.rejected.and.have.property('code', 'data-connect/permission-denied');
+
+      });
+      it('should successfully execute a query with @auth(level: NO_ACCESS)', () => {});
+      it('should fail to successfully execute a query with @auth(level: USER)', () => {});
+      it('should fail to successfully execute a query with @auth(level: USER_ANON)', () => {});
+      it('should fail to successfully execute a query with @auth(level: USER_EMAIL_VERIFIED)', () => {});
+    });
+    describe('with authenticated impersonation', () => {
+      it('should successfully execute a query with @auth(level: PUBLIC)', () => {});
+      it('should successfully execute a query with @auth(level: NO_ACCESS)', () => {});
+      it('should successfully execute a query with @auth(level: USER) \
+        if the impersonated user is not anonymous', () => {});
+      it('should fail to successfully execute a query with @auth(level: USER) \
+        if the impersonated user is anonymous', () => {});
+      it('should successfully execute a query with @auth(level: USER_ANON)', () => {});
+      it('should successfully execute a query with @auth(level: USER_EMAIL_VERIFIED) \
+        if the impersonated user has their email verified', () => {});
+      it('should fail to successfully execute a query with @auth(level: USER_EMAIL_VERIFIED) \
+        if the impersonated user does not have email verified', () => {});
+      it("should grab the impersonated user's data", () => {});
+    });
+  });
+
+  describe('impersonateMutation()', () => {
+    describe('with unauthenticated impersonation', () => {
+      it('should successfully execute a mutation with @auth(level: PUBLIC)', () => {});
+      it('should successfully execute a mutation with @auth(level: NO_ACCESS)', () => {});
+      it('should fail to successfully execute a mutation with @auth(level: USER)', () => {});
+      it('should fail to successfully execute a mutation with @auth(level: USER_ANON)', () => {});
+      it('should fail to successfully execute a mutation with @auth(level: USER_EMAIL_VERIFIED)', () => {});
+    });
+    describe('with authenticated impersonation', () => {
+      it('should successfully execute a mutation with @auth(level: PUBLIC)', () => {});
+      it('should successfully execute a mutation with @auth(level: NO_ACCESS)', () => {});
+      it('should successfully execute a mutation with @auth(level: USER) \
+        if the impersonated user is not anonymous', () => {});
+      it('should fail to successfully execute a mutation with @auth(level: USER) \
+        if the impersonated user is anonymous', () => {});
+      it('should successfully execute a mutation with @auth(level: USER_ANON)', () => {});
+      it('should successfully execute a mutation with @auth(level: USER_EMAIL_VERIFIED) \
+        if the impersonated user has their email verified', () => {});
+      it('should fail to successfully execute a mutation with @auth(level: USER_EMAIL_VERIFIED) \
+        if the impersonated user does not have email verified', () => {});
+      it("should grab the impersonated user's data", () => {});
+    });
+  });
 });