Tests/Integration/MSFT_xIISFeatureDelegation.Integration.Tests.ps1


$script:DSCModuleName = 'xWebAdministration'
$script:DSCResourceName = 'MSFT_xIISFeatureDelegation'

#region HEADER

# Integration Test Template Version: 1.1.0
$script:moduleRoot = Split-Path -Parent (Split-Path -Parent $PSScriptRoot)
if ( (-not (Test-Path -Path (Join-Path -Path $script:moduleRoot -ChildPath 'DSCResource.Tests'))) -or `
     (-not (Test-Path -Path (Join-Path -Path $script:moduleRoot -ChildPath 'DSCResource.Tests\TestHelper.psm1'))) )
{
    & git @('clone','https://github.com/PowerShell/DscResource.Tests.git',(Join-Path -Path $script:moduleRoot -ChildPath '\DSCResource.Tests\'))
}

Import-Module (Join-Path -Path $script:moduleRoot -ChildPath 'DSCResource.Tests\TestHelper.psm1') -Force
$TestEnvironment = Initialize-TestEnvironment `
    -DSCModuleName $script:DSCModuleName `
    -DSCResourceName $script:DSCResourceName `
    -TestType Integration 

#endregion

[string] $tempName = "$($script:DSCResourceName)_" + (Get-Date).ToString('yyyyMMdd_HHmmss')

try
{
    # Now that xWebAdministration should be discoverable load the configuration data
    $ConfigFile = Join-Path -Path $PSScriptRoot -ChildPath "$($script:DSCResourceName).config.ps1"
    . $ConfigFile

    $null = Backup-WebConfiguration -Name $tempName

    Describe "$($script:DSCResourceName)_Integration" {
        # Allow Feature Delegation
        # for this test we are using the anonymous Authentication feature, which is installed by default, but has Feature Delegation set to denied by default
        if ((Get-WindowsOptionalFeature �Online | Where-Object {$_.FeatureName -eq 'IIS-Security' -and $_.State -eq 'Enabled'}).Count -eq 1)
        {
            if ((Get-WebConfiguration /system.webserver/security/authentication/anonymousAuthentication iis:\).OverrideModeEffective -eq 'Deny')
            {
                It 'Allow Feature Delegation'{
                    {
                        &($script:DSCResourceName + '_AllowDelegation') -OutputPath $TestDrive
                        Start-DscConfiguration -Path $TestDrive -ComputerName localhost -Wait -Verbose -Force
                    } | Should not throw

                    (Get-WebConfiguration /system.webserver/security/authentication/anonymousAuthentication iis:\).OverrideModeEffective  | Should be 'Allow'
                }
            }
        }
        #
        # These test are broken and will be fixed under a future PR at https://github.com/PowerShell/xWebAdministration
        #
        # It 'Deny Feature Delegation' {
        # {
        # # this test doesn't really test the resource if it defaultDocument
        # # is already Deny (not the default)
        # # well it doesn't test the Set Method, but does test the Test method
        # # What if the default document module is not installed?

        # Invoke-Expression -Command "$($script:DSCResourceName)_DenyDelegation -OutputPath `$TestDrive"
        # Start-DscConfiguration -Path $TestDrive -ComputerName localhost -Wait -Verbose -Force

        # # Now lets try to add a new default document on site level, this should fail
        # # get the first site, it doesn't matter which one, it should fail.
        # $siteName = (Get-ChildItem iis:\sites | Select -First 1).Name
        # Add-WebConfigurationProperty `
        # -PSPath "MACHINE/WEBROOT/APPHOST/$siteName" `
        # -Filter 'system.webServer/defaultDocument/files' `
        # -Name '.' `
        # -Value @{Value = 'pesterpage.cgi'}

        # # remove it again, should also fail, but if both work we at least cleaned it up,
        # # it would be better to backup and restore the web.config file.
        # Remove-WebConfigurationProperty `
        # -PSPath "MACHINE/WEBROOT/APPHOST/$siteName" `
        # -Filter 'system.webServer/defaultDocument/files' `
        # -Name '.' `
        # -AtElement @{Value = 'pesterpage.cgi'}
        # } | Should Not Throw
        # }

        #It 'Deny Feature Delegation' -test {
        #{
        # # this test doesn't really test the resource if it defaultDocument
        # # is already Deny (not the default)
        # # well it doesn't test the Set Method, but does test the Test method
        # # What if the default document module is not installed?

        # Invoke-Expression -Command "$($script:DSCResourceName)_DenyDelegation -OutputPath `$TestDrive"
        # Start-DscConfiguration -Path $TestDrive -ComputerName localhost -Wait -Verbose -Force

        # # Now lets try to add a new default document on site level, this should fail
        # # get the first site, it doesn't matter which one, it should fail.
        # $siteName = (Get-ChildItem iis:\sites | Select-Object -First 1).Name
        # Add-WebConfigurationProperty -pspath "MACHINE/WEBROOT/APPHOST/$siteName" -filter 'system.webServer/defaultDocument/files' -name '.' -value @{value='pesterpage.cgi'}

        # # remove it again, should also fail, but if both work we at least cleaned it up, it would be better to backup and restore the web.config file.
        # Remove-WebConfigurationProperty -pspath "MACHINE/WEBROOT/APPHOST/$siteName" -filter 'system.webServer/defaultDocument/files' -name '.' -AtElement @{value='pesterpage.cgi'} } | should throw
        #}

        #region DEFAULT TESTS
          It 'should be able to call Get-DscConfiguration without throwing' {
              { Get-DscConfiguration -Verbose -ErrorAction Stop } | Should Not throw
          }
        #endregion
    }
}
finally
{
    #region FOOTER
    Restore-WebConfiguration -Name $tempName
    Remove-WebConfigurationBackup -Name $tempName

    Restore-TestEnvironment -TestEnvironment $TestEnvironment
    #endregion
}