1# -*- coding: utf-8 -*-
2#
3# Copyright: (c) 2018, F5 Networks Inc.
4# GNU General Public License v3.0 (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
5
6from __future__ import (absolute_import, division, print_function)
7__metaclass__ = type
8
9import os
10import json
11import pytest
12import sys
13
14if sys.version_info < (2, 7):
15    pytestmark = pytest.mark.skip("F5 Ansible modules require Python >= 2.7")
16
17from ansible.module_utils.basic import AnsibleModule
18
19from ansible_collections.f5networks.f5_modules.plugins.modules.bigip_device_auth import (
20    TacacsApiParameters, TacacsModuleParameters, TacacsManager, ModuleManager, ArgumentSpec
21)
22from ansible_collections.f5networks.f5_modules.tests.unit.compat import unittest
23from ansible_collections.f5networks.f5_modules.tests.unit.compat.mock import Mock, patch
24from ansible_collections.f5networks.f5_modules.tests.unit.modules.utils import set_module_args
25
26
27fixture_path = os.path.join(os.path.dirname(__file__), 'fixtures')
28fixture_data = {}
29
30
31def load_fixture(name):
32    path = os.path.join(fixture_path, name)
33
34    if path in fixture_data:
35        return fixture_data[path]
36
37    with open(path) as f:
38        data = f.read()
39
40    try:
41        data = json.loads(data)
42    except Exception:
43        pass
44
45    fixture_data[path] = data
46    return data
47
48
49class TestParameters(unittest.TestCase):
50    def test_module_parameters(self):
51        args = dict(
52            type="tacacs",
53            authentication="use-all-servers",
54            accounting="send-to-all-servers",
55            protocol_name="ip",
56            secret="$XXXXXXXXXXXXXXXXXXXX==",
57            servers=['10.10.10.10', '10.10.10.11'],
58            service_name="ppp",
59            use_for_auth=True,
60            update_secret="on_create",
61        )
62        p = TacacsModuleParameters(params=args)
63        assert p.type == 'tacacs'
64        assert p.authentication == 'use-all-servers'
65        assert p.accounting == 'send-to-all-servers'
66
67    def test_api_parameters(self):
68        args = load_fixture('load_tm_auth_tacacs_1.json')
69        p = TacacsApiParameters(params=args)
70        assert p.authentication == 'use-first-server'
71        assert p.accounting == 'send-to-first-server'
72        assert p.protocol_name == 'ftp'
73        assert p.secret == 'secret'
74        assert p.servers == ['11.11.11.11']
75        assert p.service_name == 'ppp'
76
77
78class TestManager(unittest.TestCase):
79
80    def setUp(self):
81        self.spec = ArgumentSpec()
82        self.p2 = patch('ansible_collections.f5networks.f5_modules.plugins.modules.bigip_device_auth.tmos_version')
83        self.p3 = patch('ansible_collections.f5networks.f5_modules.plugins.modules.bigip_device_auth.send_teem')
84        self.m2 = self.p2.start()
85        self.m2.return_value = '14.1.0'
86        self.m3 = self.p3.start()
87        self.m3.return_value = True
88
89    def tearDown(self):
90        self.p2.stop()
91        self.p3.stop()
92
93    def test_create(self, *args):
94        set_module_args(dict(
95            type="tacacs",
96            authentication="use-all-servers",
97            accounting="send-to-all-servers",
98            protocol_name="ip",
99            secret="secret",
100            servers=['10.10.10.10', '10.10.10.11'],
101            service_name="ppp",
102            use_for_auth=True,
103            update_secret="on_create",
104            state='present',
105            provider=dict(
106                password='admin',
107                server='localhost',
108                user='admin'
109            )
110        ))
111
112        module = AnsibleModule(
113            argument_spec=self.spec.argument_spec,
114            supports_check_mode=self.spec.supports_check_mode
115        )
116
117        # Override methods to force specific logic in the module to happen
118        m1 = TacacsManager(module=module)
119        m1.exists = Mock(return_value=False)
120        m1.create_on_device = Mock(return_value=True)
121        m1.update_auth_source_on_device = Mock(return_value=True)
122
123        mm = ModuleManager(module=module)
124        mm.get_manager = Mock(return_value=m1)
125
126        results = mm.exec_module()
127        assert results['changed'] is True
128