Create security tests for the backend #10

New issue

Open

opened 2020-05-31 00:55:45 +02:00 by christoph.lienhard · 0 comments

christoph.lienhard commented

2020-05-31 00:55:45 +02:00

(Migrated from git.verdigado.com)

Find a good solution to test the whole backend, especially concerning the security.

Test cases consist of three parts:

the role of the user which does the query (editor, candidate, (verified) user, or anonymous)
the query itself
the expected response

A solution may be to create a "test"-client (with appollo-js) and convert test cases into queries but there may be of-the-shelf solutions for graphql which can be utilized (they need to work with jwt authentication, though)

The tests should include most of the security setup specified in the security considerations readme.

Find a good solution to test the whole backend, especially concerning the security. Test cases consist of three parts: * the role of the user which does the query (editor, candidate, (verified) user, or anonymous) * the query itself * the expected response A solution may be to create a "test"-client (with appollo-js) and convert test cases into queries but there may be of-the-shelf solutions for graphql which can be utilized (they need to work with jwt authentication, though) The tests should include most of the security setup specified in the [security considerations readme](https://git.verdigado.com/Netzbegruenung/candymat/src/branch/security-setup/backend/security_considerations.md).

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: NB-Public/kandimat#10

No description provided.