Added DNS firewall configuration

This commit is contained in:
2025-11-06 20:49:50 +01:00
parent 591b2f8899
commit df0f60ef29
13 changed files with 1397 additions and 0 deletions

View File

@@ -0,0 +1,250 @@
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using AMWD.Net.Api.Cloudflare;
using AMWD.Net.Api.Cloudflare.Dns;
using AMWD.Net.Api.Cloudflare.Dns.Internals;
using Moq;
namespace Cloudflare.Dns.Tests.DnsFirewallExtensions
{
[TestClass]
public class CreateDNSFirewallClusterTest
{
public TestContext TestContext { get; set; }
private const string AccountId = "023e105f4ecef8ad9ca31a8372d0c353";
private const string ClusterId = "023e105f4ecef8ad9ca31a8372d0c355";
private Mock<ICloudflareClient> _clientMock;
private CloudflareResponse<DnsFirewallCluster> _response;
private List<(string RequestPath, InternalDNSFirewallClusterRequest Request)> _callbacks;
private CreateDNSFirewallClusterRequest _request;
[TestInitialize]
public void Initialize()
{
_callbacks = [];
_response = new CloudflareResponse<DnsFirewallCluster>
{
Success = true,
Messages = [new ResponseInfo(1000, "Message 1")],
Errors = [new ResponseInfo(1000, "Error 1")],
Result = new DnsFirewallCluster
{
Id = ClusterId,
Name = "example-cluster"
}
};
_request = new CreateDNSFirewallClusterRequest(AccountId, "example-cluster")
{
UpstreamIps = ["192.0.2.1"],
AttackMitigation = new AttackMitigation { Enabled = true, OnlyWhenUpstreamUnhealthy = false },
DeprecateAnyRequests = true,
EcsFallback = false,
MaximumCacheTtl = 3600,
MinimumCacheTtl = 60,
NegativeCacheTtl = 120,
RateLimit = 1000,
Retries = 1
};
}
[TestMethod]
public async Task ShouldCreateDnsFirewallCluster()
{
// Arrange
var client = GetClient();
// Act
var response = await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.AreEqual(_response.Result, response.Result);
Assert.HasCount(1, _callbacks);
var (requestPath, request) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall", requestPath);
Assert.IsNotNull(request);
Assert.AreEqual(_request.Name, request.Name);
CollectionAssert.AreEqual(_request.UpstreamIps?.ToList(), request.UpstreamIps?.ToList());
Assert.IsNotNull(request.AttackMitigation);
Assert.AreEqual(_request.AttackMitigation?.Enabled, request.AttackMitigation?.Enabled);
Assert.AreEqual(_request.AttackMitigation?.OnlyWhenUpstreamUnhealthy, request.AttackMitigation?.OnlyWhenUpstreamUnhealthy);
Assert.AreEqual(_request.DeprecateAnyRequests, request.DeprecateAnyRequests);
Assert.AreEqual(_request.EcsFallback, request.EcsFallback);
Assert.AreEqual(_request.MaximumCacheTtl, request.MaximumCacheTtl);
Assert.AreEqual(_request.MinimumCacheTtl, request.MinimumCacheTtl);
Assert.AreEqual(_request.NegativeCacheTtl, request.NegativeCacheTtl);
Assert.AreEqual(_request.RateLimit, request.RateLimit);
Assert.AreEqual(_request.Retries, request.Retries);
_clientMock.Verify(m => m.PostAsync<DnsFirewallCluster, InternalDNSFirewallClusterRequest>($"/accounts/{AccountId}/dns_firewall", It.IsAny<InternalDNSFirewallClusterRequest>(), null, TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
[TestMethod]
public async Task ShouldCreateDnsFirewallClusterMinimalSet()
{
// Arrange
_request = new CreateDNSFirewallClusterRequest(AccountId, "example-cluster");
var client = GetClient();
// Act
var response = await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.AreEqual(_response.Result, response.Result);
Assert.HasCount(1, _callbacks);
var (requestPath, request) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall", requestPath);
Assert.IsNotNull(request);
Assert.AreEqual(_request.Name, request.Name);
Assert.IsNull(request.UpstreamIps);
Assert.IsNull(request.AttackMitigation);
Assert.IsNull(request.DeprecateAnyRequests);
Assert.IsNull(request.EcsFallback);
Assert.IsNull(request.MaximumCacheTtl);
Assert.IsNull(request.MinimumCacheTtl);
Assert.IsNull(request.NegativeCacheTtl);
Assert.IsNull(request.RateLimit);
Assert.IsNull(request.Retries);
_clientMock.Verify(m => m.PostAsync<DnsFirewallCluster, InternalDNSFirewallClusterRequest>($"/accounts/{AccountId}/dns_firewall", It.IsAny<InternalDNSFirewallClusterRequest>(), null, TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
[TestMethod]
[DataRow(null)]
[DataRow("")]
[DataRow(" ")]
public async Task ShouldThrowArgumentExceptionWhenNameIsNullOrWhitespace(string name)
{
// Arrange
_request.Name = name;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
public async Task ShouldThrowArgumentExceptionWhenNameTooLong()
{
// Arrange
_request.Name = new string('a', 161);
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(29)]
[DataRow(36001)]
public async Task ShouldThrowArgumentOutOfRangeForMaximumCacheTtl(int invalid)
{
// Arrange
_request.MaximumCacheTtl = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(29)]
[DataRow(36001)]
public async Task ShouldThrowArgumentOutOfRangeForMinimumCacheTtl(int invalid)
{
// Arrange
_request.MinimumCacheTtl = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(29)]
[DataRow(36001)]
public async Task ShouldThrowArgumentOutOfRangeForNegativeCacheTtl(int invalid)
{
// Arrange
_request.NegativeCacheTtl = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(99)]
[DataRow(1_000_000_001)]
public async Task ShouldThrowArgumentOutOfRangeForRateLimit(int invalid)
{
// Arrange
_request.RateLimit = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(-1)]
[DataRow(3)]
public async Task ShouldThrowArgumentOutOfRangeForRetries(int invalid)
{
// Arrange
_request.Retries = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.CreateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
private ICloudflareClient GetClient()
{
_clientMock = new Mock<ICloudflareClient>();
_clientMock
.Setup(m => m.PostAsync<DnsFirewallCluster, InternalDNSFirewallClusterRequest>(It.IsAny<string>(), It.IsAny<InternalDNSFirewallClusterRequest>(), It.IsAny<IQueryParameterFilter>(), It.IsAny<CancellationToken>()))
.Callback<string, InternalDNSFirewallClusterRequest, IQueryParameterFilter, CancellationToken>((requestPath, request, _, _) => _callbacks.Add((requestPath, request)))
.ReturnsAsync(() => _response);
return _clientMock.Object;
}
}
}

View File

@@ -0,0 +1,97 @@
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using AMWD.Net.Api.Cloudflare;
using AMWD.Net.Api.Cloudflare.Dns;
using Moq;
namespace Cloudflare.Dns.Tests.DnsFirewallExtensions
{
[TestClass]
public class DNSFirewallClusterDetailsTest
{
public TestContext TestContext { get; set; }
private const string AccountId = "023e105f4ecef8ad9ca31a8372d0c353";
private const string ClusterId = "023e105f4ecef8ad9ca31a8372d0c355";
private Mock<ICloudflareClient> _clientMock;
private CloudflareResponse<DnsFirewallCluster> _response;
private List<(string RequestPath, IQueryParameterFilter QueryFilter)> _callbacks;
[TestInitialize]
public void Initialize()
{
_callbacks = [];
_response = new CloudflareResponse<DnsFirewallCluster>
{
Success = true,
Messages =
[
new ResponseInfo(1000, "Message 1")
],
Errors =
[
new ResponseInfo(1000, "Error 1")
],
Result = new DnsFirewallCluster
{
Id = ClusterId,
Name = "example-cluster",
ModifiedOn = DateTime.Parse("2025-01-01T12:00:00Z"),
DeprecateAnyRequests = true,
EcsFallback = false,
MaximumCacheTtl = 3600,
MinimumCacheTtl = 60,
NegativeCacheTtl = 30,
RateLimit = 1000,
Retries = 2,
DnsFirewallIps = ["10.0.0.1"],
UpstreamIps = ["192.0.2.1"],
AttackMitigation = new AttackMitigation { Enabled = true, OnlyWhenUpstreamUnhealthy = false }
}
};
}
[TestMethod]
public async Task ShouldGetDnsFirewallClusterDetails()
{
// Arrange
var client = GetClient();
// Act
var response = await client.DNSFirewallClusterDetails(AccountId, ClusterId, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.IsNotNull(response.Result);
Assert.AreEqual(ClusterId, response.Result.Id);
Assert.AreEqual("example-cluster", response.Result.Name);
Assert.IsTrue(response.Result.DeprecateAnyRequests ?? false);
Assert.AreEqual(3600, response.Result.MaximumCacheTtl);
Assert.AreEqual(60, response.Result.MinimumCacheTtl);
Assert.HasCount(1, _callbacks);
var (requestPath, queryFilter) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall/{ClusterId}", requestPath);
Assert.IsNull(queryFilter);
_clientMock.Verify(m => m.GetAsync<DnsFirewallCluster>($"/accounts/{AccountId}/dns_firewall/{ClusterId}", null, TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
private ICloudflareClient GetClient()
{
_clientMock = new Mock<ICloudflareClient>();
_clientMock
.Setup(m => m.GetAsync<DnsFirewallCluster>(It.IsAny<string>(), It.IsAny<IQueryParameterFilter>(), It.IsAny<CancellationToken>()))
.Callback<string, IQueryParameterFilter, CancellationToken>((requestPath, queryFilter, _) => _callbacks.Add((requestPath, queryFilter)))
.ReturnsAsync(() => _response);
return _clientMock.Object;
}
}
}

View File

@@ -0,0 +1,72 @@
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using AMWD.Net.Api.Cloudflare;
using AMWD.Net.Api.Cloudflare.Dns;
using Moq;
namespace Cloudflare.Dns.Tests.DnsFirewallExtensions
{
[TestClass]
public class DeleteDNSFirewallClusterTest
{
public TestContext TestContext { get; set; }
private const string AccountId = "023e105f4ecef8ad9ca31a8372d0c353";
private const string ClusterId = "023e105f4ecef8ad9ca31a8372d0c355";
private Mock<ICloudflareClient> _clientMock;
private CloudflareResponse<Identifier> _response;
private List<(string RequestPath, IQueryParameterFilter QueryFilter)> _callbacks;
[TestInitialize]
public void Initialize()
{
_callbacks = [];
_response = new CloudflareResponse<Identifier>
{
Success = true,
Messages = [new ResponseInfo(1000, "Message 1")],
Errors = [new ResponseInfo(1000, "Error 1")],
Result = new Identifier { Id = ClusterId }
};
}
[TestMethod]
public async Task ShouldDeleteDnsFirewallCluster()
{
// Arrange
var client = GetClient();
// Act
var response = await client.DeleteDNSFirewallCluster(AccountId, ClusterId, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.IsNotNull(response.Result);
Assert.AreEqual(ClusterId, response.Result.Id);
Assert.HasCount(1, _callbacks);
var (requestPath, queryFilter) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall/{ClusterId}", requestPath);
Assert.IsNull(queryFilter);
_clientMock.Verify(m => m.DeleteAsync<Identifier>($"/accounts/{AccountId}/dns_firewall/{ClusterId}", null, TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
private ICloudflareClient GetClient()
{
_clientMock = new Mock<ICloudflareClient>();
_clientMock
.Setup(m => m.DeleteAsync<Identifier>(It.IsAny<string>(), It.IsAny<IQueryParameterFilter>(), It.IsAny<CancellationToken>()))
.Callback<string, IQueryParameterFilter, CancellationToken>((requestPath, queryFilter, _) => _callbacks.Add((requestPath, queryFilter)))
.ReturnsAsync(() => _response);
return _clientMock.Object;
}
}
}

View File

@@ -0,0 +1,211 @@
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using AMWD.Net.Api.Cloudflare;
using AMWD.Net.Api.Cloudflare.Dns;
using Moq;
namespace Cloudflare.Dns.Tests.DnsFirewallExtensions
{
[TestClass]
public class ListDNSFirewallClustersTest
{
public TestContext TestContext { get; set; }
private const string AccountId = "023e105f4ecef8ad9ca31a8372d0c353";
private Mock<ICloudflareClient> _clientMock;
private CloudflareResponse<IReadOnlyCollection<DnsFirewallCluster>> _response;
private List<(string RequestPath, IQueryParameterFilter QueryFilter)> _callbacks;
[TestInitialize]
public void Initialize()
{
_callbacks = new List<(string, IQueryParameterFilter)>();
_response = new CloudflareResponse<IReadOnlyCollection<DnsFirewallCluster>>
{
Success = true,
Messages =
[
new ResponseInfo(1000, "Message 1")
],
Errors =
[
new ResponseInfo(1000, "Error 1")
],
ResultInfo = new PaginationInfo
{
Count = 1,
Page = 1,
PerPage = 20,
TotalCount = 2000,
TotalPages = 100,
},
Result =
[
new DnsFirewallCluster
{
Id = "cluster-1",
Name = "example-cluster",
ModifiedOn = DateTime.Parse("2024-01-01T05:20:00.12345Z"),
DeprecateAnyRequests = true,
MaximumCacheTtl = 3600,
MinimumCacheTtl = 60,
RateLimit = 1000,
Retries = 2,
DnsFirewallIps = ["10.0.0.1"],
UpstreamIps = ["192.0.2.1"],
AttackMitigation = new AttackMitigation { Enabled = true, OnlyWhenUpstreamUnhealthy = false }
}
]
};
}
[TestMethod]
public async Task ShouldListDNSFirewallClusters()
{
// Arrange
var client = GetClient();
// Act
var response = await client.ListDNSFirewallClusters(AccountId, cancellationToken: TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.HasCount(1, response.Result);
Assert.AreEqual("cluster-1", response.Result.First().Id);
Assert.AreEqual("example-cluster", response.Result.First().Name);
Assert.HasCount(1, _callbacks);
var (requestPath, queryFilter) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall", requestPath);
Assert.IsNull(queryFilter);
_clientMock.Verify(m => m.GetAsync<IReadOnlyCollection<DnsFirewallCluster>>($"/accounts/{AccountId}/dns_firewall", null, TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
[TestMethod]
public async Task ShouldListDNSFirewallClustersWithFilter()
{
// Arrange
var filter = new ListDNSFirewallClustersFilter
{
Page = 2,
PerPage = 10
};
var client = GetClient();
// Act
var response = await client.ListDNSFirewallClusters(AccountId, filter, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.HasCount(1, response.Result);
Assert.AreEqual("cluster-1", response.Result.First().Id);
Assert.AreEqual("example-cluster", response.Result.First().Name);
Assert.HasCount(1, _callbacks);
var (requestPath, queryFilter) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall", requestPath);
Assert.IsNotNull(queryFilter);
Assert.IsInstanceOfType<ListDNSFirewallClustersFilter>(queryFilter);
Assert.AreEqual(2, ((ListDNSFirewallClustersFilter)queryFilter).Page);
Assert.AreEqual(10, ((ListDNSFirewallClustersFilter)queryFilter).PerPage);
_clientMock.Verify(m => m.GetAsync<IReadOnlyCollection<DnsFirewallCluster>>($"/accounts/{AccountId}/dns_firewall", filter, TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
[TestMethod]
public void ShouldReturnEmptyParameterList()
{
// Arrange
var filter = new ListDNSFirewallClustersFilter();
// Act
var dict = filter.GetQueryParameters();
// Assert
Assert.IsNotNull(dict);
Assert.IsEmpty(dict);
}
[TestMethod]
public void ShouldReturnFullParameterList()
{
// Arrange
var filter = new ListDNSFirewallClustersFilter
{
Page = 2,
PerPage = 20
};
// Act
var dict = filter.GetQueryParameters();
// Assert
Assert.IsNotNull(dict);
Assert.HasCount(2, dict);
Assert.IsTrue(dict.ContainsKey("page"));
Assert.IsTrue(dict.ContainsKey("per_page"));
Assert.AreEqual("2", dict["page"]);
Assert.AreEqual("20", dict["per_page"]);
}
[TestMethod]
[DataRow(null)]
[DataRow(0)]
public void ShouldNotAddPage(int? page)
{
// Arrange
var filter = new ListDNSFirewallClustersFilter { Page = page };
// Act
var dict = filter.GetQueryParameters();
// Assert
Assert.IsNotNull(dict);
Assert.IsEmpty(dict);
}
[TestMethod]
[DataRow(null)]
[DataRow(0)]
[DataRow(101)]
public void ShouldNotAddPerPage(int? perPage)
{
// Arrange
var filter = new ListDNSFirewallClustersFilter { PerPage = perPage };
// Act
var dict = filter.GetQueryParameters();
// Assert
Assert.IsNotNull(dict);
Assert.IsEmpty(dict);
}
private ICloudflareClient GetClient()
{
_clientMock = new Mock<ICloudflareClient>();
_clientMock
.Setup(m => m.GetAsync<IReadOnlyCollection<DnsFirewallCluster>>(It.IsAny<string>(), It.IsAny<IQueryParameterFilter>(), It.IsAny<CancellationToken>()))
.Callback<string, IQueryParameterFilter, CancellationToken>((requestPath, queryFilter, _) => _callbacks.Add((requestPath, queryFilter)))
.ReturnsAsync(() => _response);
return _clientMock.Object;
}
}
}

View File

@@ -0,0 +1,250 @@
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using AMWD.Net.Api.Cloudflare;
using AMWD.Net.Api.Cloudflare.Dns;
using AMWD.Net.Api.Cloudflare.Dns.Internals;
using Moq;
namespace Cloudflare.Dns.Tests.DnsFirewallExtensions
{
[TestClass]
public class UpdateDNSFirewallClusterTest
{
public TestContext TestContext { get; set; }
private const string AccountId = "023e105f4ecef8ad9ca31a8372d0c353";
private const string ClusterId = "023e105f4ecef8ad9ca31a8372d0c355";
private Mock<ICloudflareClient> _clientMock;
private CloudflareResponse<DnsFirewallCluster> _response;
private List<(string RequestPath, InternalDNSFirewallClusterRequest Request)> _callbacks;
private UpdateDNSFirewallClusterRequest _request;
[TestInitialize]
public void Initialize()
{
_callbacks = [];
_response = new CloudflareResponse<DnsFirewallCluster>
{
Success = true,
Messages = [new ResponseInfo(1000, "Message 1")],
Errors = [new ResponseInfo(1000, "Error 1")],
Result = new DnsFirewallCluster
{
Id = ClusterId,
Name = "example-cluster"
}
};
_request = new UpdateDNSFirewallClusterRequest(AccountId, ClusterId)
{
Name = "example-cluster",
UpstreamIps = ["192.0.2.1"],
AttackMitigation = new AttackMitigation { Enabled = true, OnlyWhenUpstreamUnhealthy = false },
DeprecateAnyRequests = true,
EcsFallback = false,
MaximumCacheTtl = 3600,
MinimumCacheTtl = 60,
NegativeCacheTtl = 120,
RateLimit = 1000,
Retries = 1
};
}
[TestMethod]
public async Task ShouldUpdateDnsFirewallCluster()
{
// Arrange
var client = GetClient();
// Act
var response = await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.AreEqual(_response.Result, response.Result);
Assert.HasCount(1, _callbacks);
var (requestPath, request) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall", requestPath);
Assert.IsNotNull(request);
Assert.AreEqual(_request.Name, request.Name);
CollectionAssert.AreEqual(_request.UpstreamIps?.ToList(), request.UpstreamIps?.ToList());
Assert.IsNotNull(request.AttackMitigation);
Assert.AreEqual(_request.AttackMitigation?.Enabled, request.AttackMitigation?.Enabled);
Assert.AreEqual(_request.AttackMitigation?.OnlyWhenUpstreamUnhealthy, request.AttackMitigation?.OnlyWhenUpstreamUnhealthy);
Assert.AreEqual(_request.DeprecateAnyRequests, request.DeprecateAnyRequests);
Assert.AreEqual(_request.EcsFallback, request.EcsFallback);
Assert.AreEqual(_request.MaximumCacheTtl, request.MaximumCacheTtl);
Assert.AreEqual(_request.MinimumCacheTtl, request.MinimumCacheTtl);
Assert.AreEqual(_request.NegativeCacheTtl, request.NegativeCacheTtl);
Assert.AreEqual(_request.RateLimit, request.RateLimit);
Assert.AreEqual(_request.Retries, request.Retries);
_clientMock.Verify(m => m.PatchAsync<DnsFirewallCluster, InternalDNSFirewallClusterRequest>($"/accounts/{AccountId}/dns_firewall", It.IsAny<InternalDNSFirewallClusterRequest>(), TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
[TestMethod]
public async Task ShouldUpdateDnsFirewallClusterMinimalSet()
{
// Arrange
_request = new UpdateDNSFirewallClusterRequest(AccountId, ClusterId);
var client = GetClient();
// Act
var response = await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
// Assert
Assert.IsNotNull(response);
Assert.IsTrue(response.Success);
Assert.AreEqual(_response.Result, response.Result);
Assert.HasCount(1, _callbacks);
var (requestPath, request) = _callbacks.First();
Assert.AreEqual($"/accounts/{AccountId}/dns_firewall", requestPath);
Assert.IsNotNull(request);
Assert.IsNull(request.Name);
Assert.IsNull(request.UpstreamIps);
Assert.IsNull(request.AttackMitigation);
Assert.IsNull(request.DeprecateAnyRequests);
Assert.IsNull(request.EcsFallback);
Assert.IsNull(request.MaximumCacheTtl);
Assert.IsNull(request.MinimumCacheTtl);
Assert.IsNull(request.NegativeCacheTtl);
Assert.IsNull(request.RateLimit);
Assert.IsNull(request.Retries);
_clientMock.Verify(m => m.PatchAsync<DnsFirewallCluster, InternalDNSFirewallClusterRequest>($"/accounts/{AccountId}/dns_firewall", It.IsAny<InternalDNSFirewallClusterRequest>(), TestContext.CancellationToken), Times.Once);
_clientMock.VerifyNoOtherCalls();
}
[TestMethod]
public async Task ShouldTrimName()
{
// Arrange
_request.Name = " example-trim ";
var client = GetClient();
// Act
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
// Assert
Assert.HasCount(1, _callbacks);
var (_, request) = _callbacks.First();
Assert.AreEqual("example-trim", request.Name);
}
[TestMethod]
public async Task ShouldThrowArgumentExceptionWhenNameTooLong()
{
// Arrange
_request.Name = new string('a', 161);
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentException>(async () =>
{
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(29)]
[DataRow(36001)]
public async Task ShouldThrowArgumentOutOfRangeForMaximumCacheTtl(int invalid)
{
// Arrange
_request.MaximumCacheTtl = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(29)]
[DataRow(36001)]
public async Task ShouldThrowArgumentOutOfRangeForMinimumCacheTtl(int invalid)
{
// Arrange
_request.MinimumCacheTtl = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(29)]
[DataRow(36001)]
public async Task ShouldThrowArgumentOutOfRangeForNegativeCacheTtl(int invalid)
{
// Arrange
_request.NegativeCacheTtl = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(99)]
[DataRow(1_000_000_001)]
public async Task ShouldThrowArgumentOutOfRangeForRateLimit(int invalid)
{
// Arrange
_request.RateLimit = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
[TestMethod]
[DataRow(-1)]
[DataRow(3)]
public async Task ShouldThrowArgumentOutOfRangeForRetries(int invalid)
{
// Arrange
_request.Retries = invalid;
var client = GetClient();
// Act & Assert
await Assert.ThrowsExactlyAsync<ArgumentOutOfRangeException>(async () =>
{
await client.UpdateDNSFirewallCluster(_request, TestContext.CancellationToken);
});
}
private ICloudflareClient GetClient()
{
_clientMock = new Mock<ICloudflareClient>();
_clientMock
.Setup(m => m.PatchAsync<DnsFirewallCluster, InternalDNSFirewallClusterRequest>(It.IsAny<string>(), It.IsAny<InternalDNSFirewallClusterRequest>(), It.IsAny<CancellationToken>()))
.Callback<string, InternalDNSFirewallClusterRequest, CancellationToken>((requestPath, request, _) => _callbacks.Add((requestPath, request)))
.ReturnsAsync(() => _response);
return _clientMock.Object;
}
}
}