45 lines
2.1 KiB
TypeScript
45 lines
2.1 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { gameAdmissionDenialReason, isGameNetworkAllowed, resolveEffectiveGroup } from "../src/index";
|
|
|
|
describe("group-based admission", () => {
|
|
const everyone = { name: "everyone", accessEnabled: false };
|
|
|
|
it("uses the default group only when a user has no explicit assignment", () => {
|
|
expect(resolveEffectiveGroup(null, everyone)).toEqual(everyone);
|
|
expect(resolveEffectiveGroup({ name: "limited", accessEnabled: true }, everyone)).toEqual({
|
|
name: "limited",
|
|
accessEnabled: true,
|
|
});
|
|
});
|
|
|
|
it("does not combine default and explicitly assigned group access", () => {
|
|
const enabledDefault = { name: "everyone", accessEnabled: true };
|
|
const limited = { name: "limited", accessEnabled: false };
|
|
expect(resolveEffectiveGroup(limited, enabledDefault)?.accessEnabled).toBe(false);
|
|
});
|
|
|
|
it("denies confirmed anonymized game networks unless the effective group allows them", () => {
|
|
for (const classification of ["vpn", "proxy", "tor"] as const) {
|
|
expect(isGameNetworkAllowed(classification, false)).toBe(false);
|
|
expect(isGameNetworkAllowed(classification, true)).toBe(true);
|
|
}
|
|
});
|
|
|
|
it("does not apply the group exception policy to clear, hosting, or unavailable intelligence", () => {
|
|
for (const classification of ["clear", "hosting", "unknown"] as const) {
|
|
expect(isGameNetworkAllowed(classification, false)).toBe(true);
|
|
}
|
|
});
|
|
|
|
it("prioritizes disabled group access, then schedule, then network policy", () => {
|
|
expect(gameAdmissionDenialReason({ accessEnabled: false, anonymizedNetworksAllowed: false }, "vpn", false))
|
|
.toBe("group_access_disabled");
|
|
expect(gameAdmissionDenialReason({ accessEnabled: true, anonymizedNetworksAllowed: false }, "vpn", false))
|
|
.toBe("schedule_disallowed");
|
|
expect(gameAdmissionDenialReason({ accessEnabled: true, anonymizedNetworksAllowed: false }, "vpn", true))
|
|
.toBe("anonymized_network_disallowed");
|
|
expect(gameAdmissionDenialReason({ accessEnabled: true, anonymizedNetworksAllowed: true }, "vpn", true))
|
|
.toBeNull();
|
|
});
|
|
});
|