From d6c579a102f7f0bfbc7945a68311611aa04da0b5 Mon Sep 17 00:00:00 2001
From: Alexander Lutay <alutay@sipwise.com>
Date: Wed, 25 May 2016 12:25:02 +0200
Subject: [PATCH] MT#17801 Add test for internal REST API auth on api_int:1442

Change-Id: Ie989425571313c98f3a7bc3d36c60f2ae1a94c66
---
 ce/10_sites_ok.json.tt2 | 81 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 81 insertions(+)

diff --git a/ce/10_sites_ok.json.tt2 b/ce/10_sites_ok.json.tt2
index 8a872f2..3241370 100644
--- a/ce/10_sites_ok.json.tt2
+++ b/ce/10_sites_ok.json.tt2
@@ -19,6 +19,24 @@
    web_int_ips = out;
 -%]
 [% END -%]
+[%
+   argv.host=hostname; argv.type='api_int';
+   PROCESS '/usr/lib/ngcp-ngcpcfg/get_all_shared_ips_for_host';
+   api_int_ips = out;
+
+   PROCESS '/usr/lib/ngcp-ngcpcfg/get_all_ips_for_host';
+   api_int_ips = out.merge(api_int_ips);
+
+   argv.role='mgmt';
+   PROCESS '/usr/lib/ngcp-ngcpcfg/has_role';
+   is_mgmt = out;
+
+   argv.role='li';
+   PROCESS '/usr/lib/ngcp-ngcpcfg/has_role';
+   is_li = out;
+   is_li_enabled = is_li && cluster_sets.type == 'distributed' && intercept.enabled == 'yes';
+-%]
+
 {
     "command": {
         "curl --insecure -L http://[% web_ext_ips.0 -%]/": {
@@ -140,6 +158,69 @@
             "stderr": []
         },
 
+[% IF www_admin.enabled == 'yes' && (is_mgmt || is_li_enabled) -%]
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L https://[% rest_api.auth_system.login %]:[% rest_api.auth_system.password %]@[% api_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 0,
+            "stdout": [
+                "/Sipwise NGCP HTTP API documentation/"
+            ],
+            "stderr": []
+        },
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L http://[% rest_api.auth_system.login %]:[% rest_api.auth_system.password %]@[% api_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 0,
+            "stdout": [
+                "/Authorization required/"
+            ],
+            "stderr": []
+        },
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L https://fakeuser:[% rest_api.auth_system.password %]@[% api_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 0,
+            "stdout": [
+                "/Authorization required/"
+            ],
+            "stderr": []
+        },
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L https://[% rest_api.auth_system.login %]:wrongpassword@[% api_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 0,
+            "stdout": [
+                "/Authorization required/"
+            ],
+            "stderr": []
+        },
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L https://administrator:administrator@[% api_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 0,
+            "stdout": [
+                "Authorization required."
+            ],
+            "stderr": [],
+            "timeout": 10000
+        },
+        "curl --insecure -L https://[% rest_api.auth_system.login %]:[% rest_api.auth_system.password %]@[% api_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 0,
+            "stdout": [
+                "/Authorization required/"
+            ],
+            "stderr": []
+        },
+[% END -%]
+
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L https://[% rest_api.auth_system.login %]:[% rest_api.auth_system.password %]@[% web_ext_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 7,
+            "stdout": [],
+            "stderr": [
+                "/port [% www_admin.http_system.port %]: Connection refused/"
+            ],
+            "timeout": 10000
+        },
+        "curl -H 'NGCP-UserAgent: NGCP::API::Client' --insecure -L https://[% rest_api.auth_system.login %]:[% rest_api.auth_system.password %]@[% web_int_ips.0 -%]:[% www_admin.http_system.port %]/api/": {
+            "exit-status": 7,
+            "stdout": [],
+            "stderr": [
+                "/port [% www_admin.http_system.port %]: Connection refused/"
+            ],
+            "timeout": 10000
+        },
+
         "curl -L http://localhost:8081/nginx_status": {
             "exit-status": 0,
             "stdout": [