Tests/cOctopusServerActiveDirectoryAuthentication.Tests.ps1

#requires -Version 4.0

$moduleName = Split-Path ($PSCommandPath -replace '\.Tests\.ps1$', '') -Leaf
$script:modulePath = Split-Path $PSCommandPath -Parent
$script:modulePath = Resolve-Path "$PSCommandPath/../../DSCResources/$moduleName/$moduleName.psm1"
$script:dscHelpersPath = Resolve-Path "$PSCommandPath/../../OctopusDSCHelpers.ps1"
$module = $null

try
{
    $prefix = [guid]::NewGuid().Guid -replace '-'
    $module = Import-Module $script:modulePath -Prefix $prefix -PassThru -ErrorAction Stop

    InModuleScope $module.Name {

        Describe 'cOctopusServerActiveDirectoryAuthentication' {
            BeforeEach {
                [System.Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '')]
                $desiredConfiguration = @{
                     InstanceName                           = 'OctopusServer'
                     Enabled                                = $true
                     AllowFormsAuthenticationForDomainUsers = $false
                     ActiveDirectoryContainer               = "CN=Users,DC=GPN,DC=COM"
                }
            }

            Context 'Get-TargetResource' {
                It 'Returns the proper data' {
                    Mock Test-Path { return $true } -ParameterFilter { $LiteralPath -eq "$($env:ProgramFiles)\Octopus Deploy\Octopus\Octopus.Server.exe" }
                    Mock Test-OctopusVersionSupportsAuthenticationProvider { return $true }
                    Mock Get-ServerConfiguration {
                        return  @{
                            Octopus = @{
                                WebPortal = @{
                                    ActiveDirectoryIsEnabled = $true;
                                    AllowFormsAuthenticationForDomainUsers = $false;
                                    ActiveDirectoryContainer = "CN=Users,DC=GPN,DC=COM"
                                }
                            }
                        }
                    }

                    $config = Get-TargetResource @desiredConfiguration
                    $config.InstanceName                            | Should -Be 'OctopusServer'
                    $config.Enabled                                 | Should -Be $true
                    $config.AllowFormsAuthenticationForDomainUsers  | Should -Be $false
                    $config.ActiveDirectoryContainer                | Should -Be "CN=Users,DC=GPN,DC=COM"
                }

                It 'Throws an exception if Octopus is not installed' {
                    Mock Test-Path { return $false } -ParameterFilter { $LiteralPath -eq "$($env:ProgramFiles)\Octopus Deploy\Octopus\Octopus.Server.exe" }
                    Mock Test-OctopusVersionSupportsAuthenticationProvider { return $true }
                    { Get-TargetResource @desiredConfiguration } | Should -throw "Unable to find Octopus (checked for existence of file '$octopusServerExePath')."
                }

                It 'Throws an exception if its an old version of Octopus' {
                    Mock Test-Path { return $true } -ParameterFilter { $LiteralPath -eq "$($env:ProgramFiles)\Octopus Deploy\Octopus\Octopus.Server.exe" }
                    Mock Test-OctopusVersionSupportsAuthenticationProvider { return $false }
                    { Get-TargetResource @desiredConfiguration } | Should -throw "This resource only supports Octopus Deploy 3.5.0+."
                }
            }

            Context 'Test-TargetResource' {
                BeforeAll {
                    $response = @{ InstanceName="OctopusServer"; Enabled=$true }
                    Mock Get-TargetResource { return $response }
                }

                It 'Returns True when values the same' {
                    $response['Enabled'] = $true
                    $response['AllowFormsAuthenticationForDomainUsers'] = $false
                    $response['ActiveDirectoryContainer'] = "CN=Users,DC=GPN,DC=COM"

                    Test-TargetResource @desiredConfiguration | Should -Be $true
                }

                It 'Returns false when its currently disabled' {
                    $response['Enabled'] = $false
                    $response['AllowFormsAuthenticationForDomainUsers'] = $false
                    $response['ActiveDirectoryContainer'] = "CN=Users,DC=GPN,DC=COM"

                    Test-TargetResource @desiredConfiguration | Should -Be $false
                }

                It 'Returns false when forms auth is currently different' {
                    $response['Enabled'] = $true
                    $response['AllowFormsAuthenticationForDomainUsers'] = $true
                    $response['ActiveDirectoryContainer'] = "CN=Users,DC=GPN,DC=COM"

                    Test-TargetResource @desiredConfiguration | Should -Be $false
                }

                It 'Returns false when the container is currently different' {
                    $response['Enabled'] = $true
                    $response['AllowFormsAuthenticationForDomainUsers'] = $false
                    $response['ActiveDirectoryContainer'] = "CN=OctopusUsers,DC=GPN,DC=COM"
                    Test-TargetResource @desiredConfiguration | Should -Be $false
                }

                It 'Calls Get-TargetResource (and therefore inherits its checks)' {
                    Test-TargetResource @desiredConfiguration
                    Assert-MockCalled Get-TargetResource
                }
            }

            Context 'Set-TargetResource' {
                BeforeAll {
                    . $dscHelpersPath
                }
                It 'Calls Invoke-OctopusServerCommand with the correct arguments' {
                    Mock Invoke-OctopusServerCommand {} -verifiable
                    Set-TargetResource -InstanceName 'SuperOctopus' `
                                       -Enabled $false `
                                       -AllowFormsAuthenticationForDomainUsers $false `
                                       -ActiveDirectoryContainer "CN=OctopusUsers,DC=GPN,DC=COM"
                    Assert-MockCalled Invoke-OctopusServerCommand -ParameterFilter { ($cmdArgs -join ' ') -eq 'configure --console --instance SuperOctopus --activeDirectoryIsEnabled false --AllowFormsAuthenticationForDomainUsers false --ActiveDirectoryContainer CN=OctopusUsers,DC=GPN,DC=COM'}
                }
            }
        }
    }
}
finally
{
    if ($module) {
        Remove-Module -ModuleInfo $module
    }
}