Capture & Replay Integration Test for ProductService

Signed-off-by: Sven Strittmatter <sven.strittmatter@iteratec.com>

src/test/java/io/securecodebox/persistence/defectdojo/service/ProductServiceTest.java

@@ -1,14 +1,85 @@
 package io.securecodebox.persistence.defectdojo.service;
 
+import io.securecodebox.persistence.defectdojo.model.Product;
 import org.junit.jupiter.api.Test;
 
-import static org.junit.jupiter.api.Assertions.*;
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.util.Collections;
+import java.util.List;
+
+import static com.github.tomakehurst.wiremock.client.WireMock.*;
 import static org.hamcrest.MatcherAssert.assertThat;
-import static org.hamcrest.Matchers.*;
+import static org.hamcrest.Matchers.containsInAnyOrder;
+import static org.hamcrest.Matchers.hasSize;
+import static org.junit.jupiter.api.Assertions.assertAll;
 
 /**
  * Tests for {@link ProductService}
  */
-final class ProductServiceTest extends WireMockBaseTestCase{
+final class ProductServiceTest extends WireMockBaseTestCase {
   private final ProductService sut = new ProductService(conf());
+
+  @Test
+  void search() throws URISyntaxException, IOException {
+    stubFor(
+      get("/api/v2/products/?offset=0&limit=100")
+        .willReturn(
+          ok()
+            .withBody(readResponseBodyFromFixture("ProductService_response_fixture.json"))
+        )
+    );
+
+    final var result = sut.search();
+
+    assertAll(
+      () -> assertThat(result, hasSize(3)),
+      () -> assertThat(result, containsInAnyOrder(
+        Product.builder()
+          .id(419)
+          .name("10.0.0.1")
+          .description("Product was automatically created by the secureCodeBox DefectDojo integration")
+          .tags(List.of(
+            "attack-surface/internal",
+            "office/munich",
+            "org/owasp",
+            "vlan/dev"
+          ))
+          .productType(2)
+          .findingsCount(12)
+          .enableFullRiskAcceptance(true)
+          .authorizationGroups(Collections.emptyList())
+          .build(),
+        Product.builder()
+          .id(312)
+          .name("10.0.0.2")
+          .description("Product was automatically created by the secureCodeBox DefectDojo integration")
+          .tags(List.of(
+            "attack-surface/internal",
+            "office/hamburg",
+            "org/owasp",
+            "vlan/dev"
+          ))
+          .productType(1)
+          .findingsCount(16)
+          .enableFullRiskAcceptance(false)
+          .authorizationGroups(List.of(1L, 2L, 3L))
+          .build(),
+        Product.builder()
+          .id(297)
+          .name("10.0.0.3")
+          .description("Product was automatically created by the secureCodeBox DefectDojo integration")
+          .tags(List.of(
+            "attack-surface/external",
+            "office/munich",
+            "org/owasp"
+          ))
+          .productType(2)
+          .findingsCount(16)
+          .enableSimpleRiskAcceptance(true)
+          .authorizationGroups(Collections.emptyList())
+          .build()
+      ))
+    );
+  }
 }

src/test/resources/io/securecodebox/persistence/defectdojo/service/ProductService_response_fixture.json

@@ -1 +1,166 @@
-{}
+{
+  "count": 3,
+  "next": null,
+  "previous": null,
+  "results": [
+      {
+      "id": 419,
+      "findings_count": 12,
+      "findings_list": [
+        28834,
+        28781,
+        28752,
+        28732,
+        25096,
+        25076,
+        25055,
+        25042,
+        21822,
+        21808,
+        21793,
+        21784
+      ],
+      "tags": [
+        "attack-surface/internal",
+        "office/munich",
+        "org/owasp",
+        "vlan/dev"
+      ],
+      "product_meta": [],
+      "name": "10.0.0.1",
+      "description": "Product was automatically created by the secureCodeBox DefectDojo integration",
+      "created": "2024-03-05T10:23:43.680337Z",
+      "prod_numeric_grade": null,
+      "business_criticality": null,
+      "platform": null,
+      "lifecycle": null,
+      "origin": null,
+      "user_records": null,
+      "revenue": null,
+      "external_audience": false,
+      "internet_accessible": false,
+      "enable_product_tag_inheritance": false,
+      "enable_simple_risk_acceptance": false,
+      "enable_full_risk_acceptance": true,
+      "disable_sla_breach_notifications": false,
+      "product_manager": null,
+      "technical_contact": null,
+      "team_manager": null,
+      "prod_type": 2,
+      "sla_configuration": 1,
+      "members": [],
+      "authorization_groups": [],
+      "regulations": []
+    },
+    {
+      "id": 312,
+      "findings_count": 16,
+      "findings_list": [
+        28804,
+        28763,
+        28743,
+        28725,
+        25131,
+        25107,
+        25091,
+        25083,
+        21817,
+        21801,
+        21785,
+        21780,
+        19167,
+        18752,
+        18416,
+        18269
+      ],
+      "tags": [
+        "attack-surface/internal",
+        "office/hamburg",
+        "org/owasp",
+        "vlan/dev"
+      ],
+      "product_meta": [],
+      "name": "10.0.0.2",
+      "description": "Product was automatically created by the secureCodeBox DefectDojo integration",
+      "created": "2024-03-04T17:09:22.871051Z",
+      "prod_numeric_grade": null,
+      "business_criticality": null,
+      "platform": null,
+      "lifecycle": null,
+      "origin": null,
+      "user_records": null,
+      "revenue": null,
+      "external_audience": false,
+      "internet_accessible": false,
+      "enable_product_tag_inheritance": false,
+      "enable_simple_risk_acceptance": false,
+      "enable_full_risk_acceptance": false,
+      "disable_sla_breach_notifications": false,
+      "product_manager": null,
+      "technical_contact": null,
+      "team_manager": null,
+      "prod_type": 1,
+      "sla_configuration": 1,
+      "members": [],
+      "authorization_groups": [
+        1,
+        2,
+        3
+      ],
+      "regulations": []
+    },
+    {
+      "id": 297,
+      "findings_count": 16,
+      "findings_list": [
+        28825,
+        28776,
+        28750,
+        28735,
+        25095,
+        25075,
+        25059,
+        25043,
+        21828,
+        21815,
+        21805,
+        21797,
+        18970,
+        18462,
+        18148,
+        18023
+      ],
+      "tags": [
+        "attack-surface/external",
+        "office/munich",
+        "org/owasp"
+      ],
+      "product_meta": [],
+      "name": "10.0.0.3",
+      "description": "Product was automatically created by the secureCodeBox DefectDojo integration",
+      "created": "2024-03-04T17:07:39.258064Z",
+      "prod_numeric_grade": null,
+      "business_criticality": null,
+      "platform": null,
+      "lifecycle": null,
+      "origin": null,
+      "user_records": null,
+      "revenue": null,
+      "external_audience": false,
+      "internet_accessible": false,
+      "enable_product_tag_inheritance": false,
+      "enable_simple_risk_acceptance": true,
+      "enable_full_risk_acceptance": false,
+      "disable_sla_breach_notifications": false,
+      "product_manager": null,
+      "technical_contact": null,
+      "team_manager": null,
+      "prod_type": 2,
+      "sla_configuration": 1,
+      "members": [],
+      "authorization_groups": [],
+      "regulations": []
+    }
+  ],
+  "prefetch": {}
+}