Tests

Author: Namitha-Prabhu

.vscode/settings.json

@@ -11,5 +11,14 @@
     //".devcontainer": true,
     ".github": false,
     ".vscode": false
-  }
+  },
+  "cSpell.words": [
+    "Afwo",
+    "apikey",
+    "APIM",
+    "headerauth",
+    "headervalue",
+    "NHSD",
+    "Ogub"
+  ]
 }

tests/config/playwright.base.config.ts

@@ -1,4 +1,5 @@
 import type { PlaywrightTestConfig } from '@playwright/test';
+import { getReporters } from './reporters';
 
 const baseUrl = process.env.NHSD_APIM_PROXY_URL || 'http://localhost:3000/';
 const envMaxInstances = Number.parseInt(process.env.WORKERS_MAX_INST!) || 10;
@@ -8,6 +9,7 @@ const envMaxInstances = Number.parseInt(process.env.WORKERS_MAX_INST!) || 10;
 export const config: PlaywrightTestConfig = {
   testDir: '../sandbox/messages/get_single_letter/',
   testMatch: '**/*.ts',
+    reporter: getReporters('api-test'),
   /* Maximum time one test can run for. */
   timeout: 60 * 1000,
   workers: envMaxInstances,

tests/constants/api_constants.ts

@@ -1 +1,4 @@
 //export const COMMSTABLENAME = `comms-${env}-api-stg-comms-mgr`;
+export const DEV_API_GATEWAY_URL = "https://internal-dev.api.service.nhs.uk/nhs-notify-supplier-PR-136/";
+export const API_KEY = "F3ir2EgOReLtHOgubFxCTAfwoERoFEgu";
+export const LETTERS_ENDPOINT = 'letters';

tests/mtls/mtls_test.ts

@@ -0,0 +1,27 @@
+import { test, expect, request, APIRequestContext } from '@playwright/test';
+import { DEV_API_GATEWAY_URL } from '../constants/api_constants';
+
+// Assume you have your constants in a config file
+const INT_API_GATEWAY_URL = DEV_API_GATEWAY_URL;
+
+test.describe('test mTLS connection', () => {
+  test('Ensure that the mTLS is enabled on internal-dev API backend services', async () => {
+    let apiContext: APIRequestContext | null = null;
+
+    try {
+      // Create a new request context (without client certs)
+      apiContext = await request.newContext();
+
+      // Expect this GET request to throw due to SSL/mTLS enforcement
+      await expect(async () => {
+        await apiContext!.get(INT_API_GATEWAY_URL, {
+          headers: { "X-Client-Id": "hello" }
+        });
+      }).rejects.toThrow();
+    } finally {
+      if (apiContext) {
+        await apiContext.dispose();
+      }
+    }
+  });
+});

tests/mtls/test_mtls.ts

@@ -0,0 +1,26 @@
+import { test, expect, request, APIRequestContext } from '@playwright/test';
+
+// Assume you have your constants in a config file
+const INT_API_GATEWAY_URL = process.env.INT_API_GATEWAY_URL || "https://your-int-api-gateway-url";
+
+test.describe('mTLS Integration API', () => {
+  test('should fail when connecting without client certificate', async () => {
+    let apiContext: APIRequestContext | null = null;
+
+    try {
+      // Create a new request context (without client certs)
+      apiContext = await request.newContext();
+
+      // Expect this GET request to throw due to SSL/mTLS enforcement
+      await expect(async () => {
+        await apiContext!.get(INT_API_GATEWAY_URL, {
+          headers: { "X-Client-Id": "hello" }
+        });
+      }).rejects.toThrow();
+    } finally {
+      if (apiContext) {
+        await apiContext.dispose();
+      }
+    }
+  });
+});

tests/sandbox/messages/get_single_letter/test_401.ts

@@ -0,0 +1,25 @@
+import { test, expect } from '@playwright/test';
+import { DEV_API_GATEWAY_URL, LETTERS_ENDPOINT} from '../../../constants/api_constants';
+
+// Constants
+const status = "PENDING";
+
+test("401 when invalid APIKEY is passed", async ({ request }) => {
+  const headers = {
+    headerauth1 : 'headervalue1',
+    apikey : '',
+    Authorization: '1234'
+   };
+
+  const API_URL = process.env.NHSD_APIM_PROXY_URL || DEV_API_GATEWAY_URL;
+  const API_GATEWAY_URL = `${API_URL}${LETTERS_ENDPOINT}`;
+
+  const response = await request.get(API_GATEWAY_URL, {
+      params: {
+        status: `${status}`
+      },
+      headers
+    });
+
+    await expect(response.status()).toBe(401);
+  });

tests/sandbox/messages/get_single_letter/test_404.ts

@@ -1,26 +1,27 @@
-import { test, expect, APIRequestContext } from '@playwright/test';
+import { test, expect } from '@playwright/test';
+import { API_KEY, DEV_API_GATEWAY_URL, LETTERS_ENDPOINT} from '../../../constants/api_constants';
 
 // Constants
-const CORRELATION_IDS = '228aac39-542d-4803-b28e-5de9e100b9f8';
-const REQUEST_ID = 'xx';
-const MESSAGES_ENDPOINT = '/letter'; // Update this path to match your constant
-const status = "PENDING";
+const STATUS = 'PENDING';
 
-// Parameterized test in Playwright
-  test("200 when valid request ID", async ({ request }) => {
-    const headers = {
-      'Accept': '*/*',
-      'Content-Type': 'application/json',
-    };
+test("200 when valid input is passed", async ({ request }) => {
+  const headers = {
+    headerauth1 : 'headervalue1',
+    apikey : API_KEY,
+    Authorization: '1234'
+   };
 
-    headers['X-Correlation-Id'] = CORRELATION_IDS;
+  const API_URL = process.env.NHSD_APIM_PROXY_URL || DEV_API_GATEWAY_URL;
+  const API_GATEWAY_URL = `${API_URL}${LETTERS_ENDPOINT}`;
 
-    const response = await request.get(`${process.env.NHSD_APIM_PROXY_URL}${MESSAGES_ENDPOINT}`, {
+  const response = await request.get(API_GATEWAY_URL, {
       params: {
-        id: `${REQUEST_ID}`
+        status: `${STATUS}`
       },
       headers
     });
 
+    console.log(await response.json());
     await expect(response.status()).toBe(200);
+    expect(response.ok()).toBeTruthy();
   });