mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-24 04:51:51 +00:00
Hugo Pereira Brito
107 lines
3.1 KiB
Python
107 lines
3.1 KiB
Python
"""Test fixtures for Google Workspace provider tests"""
|
|
|
|
from unittest.mock import MagicMock
|
|
|
|
from prowler.providers.googleworkspace.models import (
|
|
GoogleWorkspaceIdentityInfo,
|
|
GoogleWorkspaceResource,
|
|
)
|
|
|
|
# Google Workspace test constants
|
|
DOMAIN = "test-company.com"
|
|
CUSTOMER_ID = "C1234567"
|
|
DELEGATED_USER = "prowler-reader@test-company.com"
|
|
ROOT_ORG_UNIT_ID = "03ph8a2z1234"
|
|
|
|
# Service Account credentials (mock)
|
|
SERVICE_ACCOUNT_CREDENTIALS = {
|
|
"type": "service_account",
|
|
"project_id": "test-project-12345",
|
|
"private_key_id": "test-key-id-12345",
|
|
"private_key": "-----BEGIN PRIVATE KEY-----\nMIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC\n-----END PRIVATE KEY-----\n",
|
|
"client_email": "test-sa@test-project-12345.iam.gserviceaccount.com",
|
|
"client_id": "123456789012345678901",
|
|
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
|
"token_uri": "https://oauth2.googleapis.com/token",
|
|
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
|
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/test-sa%40test-project-12345.iam.gserviceaccount.com",
|
|
}
|
|
|
|
# Mock user data
|
|
USER_1 = {
|
|
"id": "user1-id",
|
|
"primaryEmail": "admin@test-company.com",
|
|
"isAdmin": True,
|
|
}
|
|
|
|
USER_2 = {
|
|
"id": "user2-id",
|
|
"primaryEmail": "admin2@test-company.com",
|
|
"isAdmin": True,
|
|
}
|
|
|
|
USER_3 = {
|
|
"id": "user3-id",
|
|
"primaryEmail": "user@test-company.com",
|
|
"isAdmin": False,
|
|
}
|
|
|
|
|
|
# Role data for Directory API role tests
|
|
SUPER_ADMIN_ROLE_ID = "13801188331880449"
|
|
SEED_ADMIN_ROLE_ID = "13801188331880451"
|
|
GROUPS_ADMIN_ROLE_ID = "13801188331880450"
|
|
|
|
ROLE_SUPER_ADMIN = {
|
|
"roleId": SUPER_ADMIN_ROLE_ID,
|
|
"roleName": "Super Admin",
|
|
"roleDescription": "Super Admin",
|
|
"isSystemRole": True,
|
|
"isSuperAdminRole": True,
|
|
}
|
|
|
|
# Google automatically assigns _SEED_ADMIN_ROLE to the first account that
|
|
# created the domain. It is a super-admin-capable system role with a
|
|
# different name, so it must also be excluded when counting "extra" roles.
|
|
ROLE_SEED_ADMIN = {
|
|
"roleId": SEED_ADMIN_ROLE_ID,
|
|
"roleName": "_SEED_ADMIN_ROLE",
|
|
"roleDescription": "Super Admin",
|
|
"isSystemRole": True,
|
|
"isSuperAdminRole": True,
|
|
}
|
|
|
|
ROLE_GROUPS_ADMIN = {
|
|
"roleId": GROUPS_ADMIN_ROLE_ID,
|
|
"roleName": "_GROUPS_ADMIN_ROLE",
|
|
"roleDescription": "Groups Administrator",
|
|
"isSystemRole": True,
|
|
"isSuperAdminRole": False,
|
|
}
|
|
|
|
|
|
def set_mocked_googleworkspace_provider(
|
|
identity: GoogleWorkspaceIdentityInfo = GoogleWorkspaceIdentityInfo(
|
|
domain=DOMAIN,
|
|
customer_id=CUSTOMER_ID,
|
|
delegated_user=DELEGATED_USER,
|
|
root_org_unit_id=ROOT_ORG_UNIT_ID,
|
|
profile="default",
|
|
),
|
|
):
|
|
provider = MagicMock()
|
|
provider.type = "googleworkspace"
|
|
provider.identity = identity
|
|
provider.domain_resource = build_googleworkspace_domain_resource()
|
|
return provider
|
|
|
|
|
|
def build_googleworkspace_domain_resource() -> GoogleWorkspaceResource:
|
|
"""Build the domain-level Google Workspace resource for tests."""
|
|
|
|
return GoogleWorkspaceResource(
|
|
id=CUSTOMER_ID,
|
|
name=DOMAIN,
|
|
customer_id=CUSTOMER_ID,
|
|
)
|