+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })++  // this is a sample to check the signed-in user's permission to access this resource via casbin policies based on configuration in the OAuth provider+  // a real-world example would have more context around the user account and roles/scopes/permissions and policies+  server.route({+    method: 'GET',+    url: '/authzcheck',+    schema: {+      tags: ['authz'],+      security: [+        {+          apiKey: []+        }+      ]+    },+    onRequest: [+      server.authenticate,+      async (request, res) => {+        const authzId = request.headers['x-authz-id']+        const authzUserData = jwt.decode(authzId)+        // we added the user to role with admin access above in the server.onReady hook+        // Here's where the actual policy check goes ahead - based on the user's email+        if (+          !(await server.casbin.enforce(authzUserData.email, 'admin', 'access'))+        ) {+          throw new Forbidden('Cannot access admin')+        }+      }+    ],+    handler: async req => {+      return {+        isAdmin: true,+        user: req.user+      }+    }+  })

+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })++  // this is a sample to check the signed-in user's permission to access this resource via casbin policies based on configuration in the OAuth provider+  // a real-world example would have more context around the user account and roles/scopes/permissions and policies+  server.route({+    method: 'GET',+    url: '/authzcheck',+    schema: {+      tags: ['authz'],+      security: [+        {+          apiKey: []+        }+      ]+    },+    onRequest: [+      server.authenticate,+      async (request, res) => {+        const authzId = request.headers['x-authz-id']+        const authzUserData = jwt.decode(authzId)+        // we added the user to role with admin access above in the server.onReady hook+        // Here's where the actual policy check goes ahead - based on the user's email+        if (+          !(await server.casbin.enforce(authzUserData.email, 'admin', 'access'))+        ) {+          throw new Forbidden('Cannot access admin')+        }+      }

+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })++  // this is a sample to check the signed-in user's permission to access this resource via casbin policies based on configuration in the OAuth provider+  // a real-world example would have more context around the user account and roles/scopes/permissions and policies+  server.route({+    method: 'GET',+    url: '/authzcheck',+    schema: {+      tags: ['authz'],+      security: [+        {+          apiKey: []+        }+      ]+    },+    onRequest: [+      server.authenticate,+      async (request, res) => {+        const authzId = request.headers['x-authz-id']+        const authzUserData = jwt.decode(authzId)

+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })

+import React from 'react'+import T from 'prop-types'+import { screen, render, waitFor, fireEvent } from '@testing-library/react'+import { useQuery } from 'graphql-hooks'+import deepmerge from 'deepmerge'++import mockRootContext from '../test-utils/mockRootContext'+import { withThemeSwitcher, withRouter } from '../test-utils/providers'+import { LOAD_ROOT } from '../graphql'++import RootContext from './RootContext'+import User from './User'++const RootContextWrapper = ({ children }) => {+  return (+    <RootContext.Provider value={mockRootContext}>+      {children}+    </RootContext.Provider>+  )+}++RootContextWrapper.propTypes = {+  children: T.node+}++const withProviders = (children, options) => {+  const { path = '/users' } = options || {}+  return withThemeSwitcher(withRouter(children, path))+}++const mockUseQuery = (overrides = {}) => query => {+  let data = {}++  if (query === LOAD_ROOT) {+    data = mockRootContext+  }++  if (/query LoadUsers\(/.test(query)) {+    data = {+      users: { data: [], nextPage: '234567' }+    }+  }++  if (/query LoadUser\(/.test(query)) {+    data = {+      user: {+        Username: 'a_user',+        Enabled: true,+        UserStatus: 'FORCE_CHANGE_PASSWORD',+        UserCreateDate: '2021-01-07T12:33:07.571Z',+        UserLastModifiedDate: '2021-01-07T12:33:07.571Z',+        groups: [+          {+            GroupName: 'AnotherGroup',+            Description: 'Another group description',+            CreationDate: '2021-01-05T10:42:20.733Z',+            LastModifiedDate: '2021-01-05T10:42:20.733Z',+            users: { data: [], nextPage: '234567' }+          }+        ]+      },+      groups: { data: [], nextPage: '234567' }+    }+  }++  if (/query LoadGroups\(/.test(query)) {+    data = {+      groups: { data: [], nextPage: '234567' }+    }+  }++  if (/query LoadGroup\(/.test(query)) {+    data = {+      group: {+        GroupName: 'AnotherGroup',+        Description: 'Another group description',+        CreationDate: '2021-01-05T10:42:20.733Z',+        LastModifiedDate: '2021-01-05T10:42:20.733Z',+        users: { data: [], nextPage: '234567' }+      },+      users: { data: [], nextPage: '234567' }+    }+  }++  return deepmerge({ data, loading: false }, overrides)+}++const mockMutation = jest.fn()++jest.mock('graphql-hooks', () => {+  const originalLib = jest.requireActual('graphql-hooks')++  return {+    ...originalLib,+    useMutation: jest.fn().mockImplementation(() => [mockMutation]),+    useQuery: jest.fn()+  }+})++const mockGoBack = jest.fn()++jest.mock('react-router-dom', () => {+  const originalLib = jest.requireActual('react-router-dom')++  return {+    ...originalLib,+    useHistory: jest.fn().mockImplementation(() => ({ goBack: mockGoBack })),+    useQuery: jest.fn()+  }+})++afterEach(() => {+  jest.clearAllMocks()+})++describe('user', () => {+  it('should render user component', () => {+    useQuery.mockImplementation(mockUseQuery())++    render(withProviders(<User userId="1234" />), {+      wrapper: RootContextWrapper+    })++    expect(screen.getByText(/Add to group/i)).toBeInTheDocument()+    expect(screen.getByText(/Delete user/i)).toBeInTheDocument()+    expect(screen.getAllByTestId(/user-group-chip/i).length).toEqual(1)+  })++  it('should open delete dialog when "Delete user" clicked', async () => {+    useQuery.mockImplementation(mockUseQuery())++    render(withProviders(<User userId="1234" />), {+      wrapper: RootContextWrapper+    })+    screen.getAllByRole('button', { name: /Delete user/i })[0].click()++    expect(screen.getByTestId('dialog-form')).toBeInTheDocument()+    expect(screen.getByRole('button', { name: 'Confirm' })).toBeInTheDocument()+  })++  it('should delete user when "Delete user" dialog submitted', async () => {+    useQuery.mockImplementation(mockUseQuery())++    render(withProviders(<User userId="1234" />), {+      wrapper: RootContextWrapper+    })+    screen.getAllByRole('button', { name: /Delete user/i })[0].click()++    fireEvent.submit(screen.getByTestId('dialog-form'))++    await waitFor(() =>

+import React from 'react'+import { screen, render } from '@testing-library/react'++import ErrorBoundary from './ErrorBoundary'++const ThrowError = ({ shouldThrow }) => {+  if (shouldThrow) {+    throw new Error('Custom error message')+  } else {+    return null+  }+}++beforeEach(() => {+  // eslint-disable-next-line no-console+  console.error = jest.fn()

+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })++  // this is a sample to check the signed-in user's permission to access this resource via casbin policies based on configuration in the OAuth provider+  // a real-world example would have more context around the user account and roles/scopes/permissions and policies+  server.route({+    method: 'GET',+    url: '/authzcheck',+    schema: {+      tags: ['authz'],+      security: [+        {+          apiKey: []+        }+      ]+    },+    onRequest: [+      server.authenticate,+      async (request, res) => {+        const authzId = request.headers['x-authz-id']+        const authzUserData = jwt.decode(authzId)+        // we added the user to role with admin access above in the server.onReady hook+        // Here's where the actual policy check goes ahead - based on the user's email+        if (+          !(await server.casbin.enforce(authzUserData.email, 'admin', 'access'))+        ) {+          throw new Forbidden('Cannot access admin')+        }+      }+    ],+    handler: async req => {+      return {+        isAdmin: true,+        user: req.user+      }+    }+  })

+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })++  // this is a sample to check the signed-in user's permission to access this resource via casbin policies based on configuration in the OAuth provider+  // a real-world example would have more context around the user account and roles/scopes/permissions and policies+  server.route({+    method: 'GET',+    url: '/authzcheck',+    schema: {+      tags: ['authz'],+      security: [+        {+          apiKey: []+        }+      ]+    },+    onRequest: [+      server.authenticate,+      async (request, res) => {+        const authzId = request.headers['x-authz-id']+        const authzUserData = jwt.decode(authzId)

+'use strict'++const fp = require('fastify-plugin')+const { Forbidden } = require('http-errors')+const jwt = require('jsonwebtoken')++async function authRoutes(server, options) {+  // add users to the admin role+  server.addHook('onReady', async function () {+    const adminUsers = process.env.CHECK_AUTHZ_ADMIN_USERS || ''+    const policies = adminUsers+      .split(',')+      .map(u => server.casbin.addRoleForUser(u, 'role_admin'))+    await Promise.all(policies)+  })++  // this is a sample to check the signed-in user's permission to access this resource via casbin policies based on configuration in the OAuth provider+  // a real-world example would have more context around the user account and roles/scopes/permissions and policies+  server.route({+    method: 'GET',+    url: '/authzcheck',+    schema: {+      tags: ['authz'],+      security: [+        {+          apiKey: []+        }+      ]+    },+    onRequest: [+      server.authenticate,+      async (request, res) => {+        const authzId = request.headers['x-authz-id']+        const authzUserData = jwt.decode(authzId)+        // we added the user to role with admin access above in the server.onReady hook+        // Here's where the actual policy check goes ahead - based on the user's email+        if (+          !(await server.casbin.enforce(authzUserData.email, 'admin', 'access'))+        ) {+          throw new Forbidden('Cannot access admin')+        }+      }+    ],+    handler: async req => {+      return {+        isAdmin: true,+        user: req.user+      }+    }+  })