Initial commit: scadaproj umbrella — sister-project index, auth component normalization (design + GAPS), and the built ZB.MOM.WW.Auth shared library (0.1.0, flattened in).

2026-06-01 03:59:23 -04:00
commit 37e23cf9f2
73 changed files with 6836 additions and 0 deletions
@@ -0,0 +1,75 @@
+using ZB.MOM.WW.Auth.Abstractions.Ldap;
+using ZB.MOM.WW.Auth.Ldap;
+
+namespace ZB.MOM.WW.Auth.Ldap.Tests;
+
+public class LdapOptionsValidatorTests
+{
+    private static LdapOptions Opts() => new()
+    {
+        Enabled = true,
+        Server = "x",
+        Transport = LdapTransport.None,
+        AllowInsecure = true,
+        SearchBase = "dc=x",
+        ServiceAccountDn = "cn=svc,dc=x",
+    };
+
+    [Fact]
+    public void Validator_Fails_PlainTransport_WhenNotAllowInsecure() =>
+        Assert.True(new LdapOptionsValidator()
+            .Validate(null, Opts() with { Transport = LdapTransport.None, AllowInsecure = false })
+            .Failed);
+
+    [Fact]
+    public void Validator_Fails_WhenServerEmpty() =>
+        Assert.True(new LdapOptionsValidator()
+            .Validate(null, Opts() with { Server = "   " })
+            .Failed);
+
+    [Fact]
+    public void Validator_Fails_WhenSearchBaseEmpty() =>
+        Assert.True(new LdapOptionsValidator()
+            .Validate(null, Opts() with { SearchBase = "" })
+            .Failed);
+
+    [Fact]
+    public void Validator_FailureMessage_NamesOffendingField()
+    {
+        var result = new LdapOptionsValidator()
+            .Validate(null, Opts() with { Server = "" });
+
+        Assert.True(result.Failed);
+        Assert.Contains(nameof(LdapOptions.Server), result.FailureMessage);
+    }
+
+    [Fact]
+    public void Validator_Fails_WhenServiceAccountDnEmpty()
+    {
+        // I5: an empty ServiceAccountDn risks an anonymous bind, so it must be rejected
+        // and the failure message must name the offending key.
+        var result = new LdapOptionsValidator()
+            .Validate(null, Opts() with { ServiceAccountDn = "   " });
+
+        Assert.True(result.Failed);
+        Assert.Contains(nameof(LdapOptions.ServiceAccountDn), result.FailureMessage);
+    }
+
+    [Fact]
+    public void Validator_Succeeds_OnValidSecureConfig() =>
+        Assert.False(new LdapOptionsValidator()
+            .Validate(null, Opts() with
+            {
+                Transport = LdapTransport.Ldaps,
+                AllowInsecure = false,
+                Server = "s",
+                SearchBase = "dc=x",
+            })
+            .Failed);
+
+    [Fact]
+    public void Validator_Succeeds_OnInsecureWhenAllowed() =>
+        Assert.False(new LdapOptionsValidator()
+            .Validate(null, Opts())
+            .Failed);
+}