mirror of
https://github.com/prowler-cloud/prowler.git
synced 2025-12-19 05:17:47 +00:00
3d59c34ec9
Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Pepe Fagoaga <pepe@prowler.com> Co-authored-by: Nacho Rivera <nachor1992@gmail.com> Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com> Co-authored-by: Pedro Martín <pedromarting3@gmail.com> Co-authored-by: Hugo966 <148140670+Hugo966@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Hugo Gálvez Ureña <hugogalvezu96@gmail.com> Co-authored-by: github-actions <noreply@github.com>
80 lines
2.7 KiB
Python
80 lines
2.7 KiB
Python
from unittest.mock import patch
|
|
|
|
from azure.mgmt.web.models import ManagedServiceIdentity, SiteConfigResource
|
|
|
|
from prowler.providers.azure.services.app.app_service import App, WebApp
|
|
from tests.providers.azure.azure_fixtures import (
|
|
AZURE_SUBSCRIPTION_ID,
|
|
set_mocked_azure_provider,
|
|
)
|
|
|
|
|
|
def mock_app_get_apps(_):
|
|
return {
|
|
AZURE_SUBSCRIPTION_ID: {
|
|
"app_id-1": WebApp(
|
|
resource_id="/subscriptions/resource_id",
|
|
configurations=SiteConfigResource(),
|
|
identity=ManagedServiceIdentity(type="SystemAssigned"),
|
|
auth_enabled=True,
|
|
client_cert_mode="Required",
|
|
https_only=True,
|
|
)
|
|
}
|
|
}
|
|
|
|
|
|
@patch(
|
|
"prowler.providers.azure.services.app.app_service.App.__get_apps__",
|
|
new=mock_app_get_apps,
|
|
)
|
|
class Test_App_Service:
|
|
def test__get_client__(self):
|
|
app_service = App(set_mocked_azure_provider())
|
|
assert (
|
|
app_service.clients[AZURE_SUBSCRIPTION_ID].__class__.__name__
|
|
== "WebSiteManagementClient"
|
|
)
|
|
|
|
def test__get_subscriptions__(self):
|
|
app_service = App(set_mocked_azure_provider())
|
|
assert app_service.subscriptions.__class__.__name__ == "dict"
|
|
|
|
def test__get_apps__(self):
|
|
app_service = App(set_mocked_azure_provider())
|
|
assert len(app_service.apps) == 1
|
|
assert (
|
|
app_service.apps[AZURE_SUBSCRIPTION_ID]["app_id-1"].resource_id
|
|
== "/subscriptions/resource_id"
|
|
)
|
|
assert app_service.apps[AZURE_SUBSCRIPTION_ID]["app_id-1"].auth_enabled
|
|
assert (
|
|
app_service.apps[AZURE_SUBSCRIPTION_ID]["app_id-1"].client_cert_mode
|
|
== "Required"
|
|
)
|
|
assert app_service.apps[AZURE_SUBSCRIPTION_ID]["app_id-1"].https_only
|
|
assert (
|
|
app_service.apps[AZURE_SUBSCRIPTION_ID]["app_id-1"].identity.type
|
|
== "SystemAssigned"
|
|
)
|
|
assert (
|
|
app_service.apps[AZURE_SUBSCRIPTION_ID][
|
|
"app_id-1"
|
|
].configurations.__class__.__name__
|
|
== "SiteConfigResource"
|
|
)
|
|
|
|
def test__get_client_cert_mode__(self):
|
|
app_service = App(set_mocked_azure_provider())
|
|
assert (
|
|
app_service.__get_client_cert_mode__(False, "OptionalInteractiveUser")
|
|
== "Ignore"
|
|
)
|
|
assert (
|
|
app_service.__get_client_cert_mode__(True, "OptionalInteractiveUser")
|
|
== "Optional"
|
|
)
|
|
assert app_service.__get_client_cert_mode__(True, "Optional") == "Allow"
|
|
assert app_service.__get_client_cert_mode__(True, "Required") == "Required"
|
|
assert app_service.__get_client_cert_mode__(True, "Foo") == "Ignore"
|