2026-05-26 11:13:14 +02:00
|
|
|
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
|
|
|
|
|
import { screen, waitFor } from '@testing-library/react';
|
|
|
|
|
import { Route, Routes } from 'react-router-dom';
|
|
|
|
|
import MockAdapter from 'axios-mock-adapter';
|
|
|
|
|
import { apiClient } from '@/api/client';
|
|
|
|
|
import { SimulationFormPage } from '@/pages/SimulationFormPage';
|
|
|
|
|
import { renderWithProviders } from './utils';
|
|
|
|
|
import type { Simulation } from '@/api/types';
|
|
|
|
|
|
|
|
|
|
const BASE_SIM: Simulation = {
|
|
|
|
|
id: 7,
|
|
|
|
|
engagement_id: 42,
|
|
|
|
|
name: 'Recon test',
|
feat(frontend): sprint 3 — multi-technique MITRE selection + matrix modal
- types: replace mitre_technique_id/name scalars with techniques:MitreTechnique[]
on Simulation; add MitreTactic/MitreMatrixTechnique/MitreMatrixSubtechnique;
SimulationPatchInput now uses technique_ids:string[]
- api/mitre.ts: add getMitreMatrix() → GET /api/mitre/matrix
- hooks/useMitre: add useMitreMatrix(enabled) with staleTime:Infinity
- MitreTechniquePicker: clean rewrite — onSelect(technique) one-shot, resets
input after selection, no incoming value props
- MitreTechniqueTag: chip component with id+name and × remove button
- MitreMatrixModal: tactic columns (220px fixed), expand/collapse subtechniques,
search filter (auto-expands parent on sub match), selection state, focus trap
(Tab wrap, Escape, search autofocus), backdrop click cancel, Apply N techniques
- MitreTechniquesField: orchestrates tags+picker+matrix with auto-save PATCH on
every add/remove/Apply, dedup guard, disabled read-only mode for SOC
- SimulationFormPage: swap MitreTechniquePicker for MitreTechniquesField; remove
technique state from RT form (techniques have independent auto-save cycle)
- SimulationList: MITRE column → T1059 +2 counter format, — when empty
- Tests: 84 passing (13 test files); new suites for Tag, Field, Modal;
MitreTechniquePicker + SimulationFormPage + SimulationList adapted to new API
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-27 04:04:23 +02:00
|
|
|
techniques: [],
|
2026-05-26 11:13:14 +02:00
|
|
|
description: 'Some description',
|
|
|
|
|
commands: 'whoami\nipconfig',
|
|
|
|
|
prerequisites: null,
|
|
|
|
|
executed_at: null,
|
|
|
|
|
execution_result: null,
|
|
|
|
|
log_source: null,
|
|
|
|
|
logs: null,
|
|
|
|
|
soc_comment: null,
|
|
|
|
|
incident_number: null,
|
|
|
|
|
status: 'pending',
|
|
|
|
|
created_at: '2026-05-26T08:00:00',
|
|
|
|
|
updated_at: null,
|
|
|
|
|
created_by: { id: 1, username: 'alice' },
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
let mockRole: 'admin' | 'redteam' | 'soc' = 'redteam';
|
|
|
|
|
|
|
|
|
|
vi.mock('@/hooks/useAuth', () => ({
|
|
|
|
|
useAuth: () => ({
|
|
|
|
|
user: { id: 1, username: 'alice', role: mockRole, created_at: '2026-01-01' },
|
|
|
|
|
status: 'authenticated',
|
|
|
|
|
login: vi.fn(),
|
|
|
|
|
logout: vi.fn(),
|
|
|
|
|
isAdmin: mockRole === 'admin',
|
|
|
|
|
isRedteam: mockRole === 'redteam',
|
|
|
|
|
isSoc: mockRole === 'soc',
|
|
|
|
|
canEditEngagements: mockRole === 'admin' || mockRole === 'redteam',
|
|
|
|
|
}),
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
// Wrap the page in a Route so useParams gets eid and sid
|
|
|
|
|
function EditPage() {
|
|
|
|
|
return (
|
|
|
|
|
<Routes>
|
|
|
|
|
<Route path="/engagements/:eid/simulations/:sid/edit" element={<SimulationFormPage />} />
|
|
|
|
|
</Routes>
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function NewPage() {
|
|
|
|
|
return (
|
|
|
|
|
<Routes>
|
|
|
|
|
<Route path="/engagements/:eid/simulations/new" element={<SimulationFormPage />} />
|
|
|
|
|
</Routes>
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
describe('SimulationFormPage — redteam mode (edit existing)', () => {
|
|
|
|
|
let mock: MockAdapter;
|
|
|
|
|
|
|
|
|
|
beforeEach(() => {
|
|
|
|
|
mockRole = 'redteam';
|
|
|
|
|
mock = new MockAdapter(apiClient);
|
|
|
|
|
mock.onGet('/simulations/7').reply(200, BASE_SIM);
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
afterEach(() => {
|
|
|
|
|
mock.restore();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('renders loading state initially', () => {
|
|
|
|
|
mock.onGet('/simulations/7').reply(() => new Promise(() => {}));
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
expect(screen.getByTestId('loading-state')).toBeInTheDocument();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('all Red Team fields are enabled for redteam', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByLabelText(/^Name/i)).not.toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
expect(screen.getByLabelText(/Description/i)).not.toBeDisabled();
|
|
|
|
|
expect(screen.getByLabelText(/Commands/i)).not.toBeDisabled();
|
|
|
|
|
expect(screen.getByLabelText(/Executed at/i)).not.toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
it('shows "Mark for review" button when status is pending', async () => {
|
2026-05-26 11:13:14 +02:00
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
2026-05-26 16:08:46 +02:00
|
|
|
expect(screen.getByRole('button', { name: /Mark for review/i })).toBeInTheDocument();
|
2026-05-26 11:13:14 +02:00
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
it('does not show "Close" when status is pending', async () => {
|
2026-05-26 11:13:14 +02:00
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
await waitFor(() => screen.getByRole('button', { name: /Mark for review/i }));
|
|
|
|
|
expect(screen.queryByRole('button', { name: /^Close$/i })).toBeNull();
|
2026-05-26 11:13:14 +02:00
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
it('shows "Mark for review" for in_progress status', async () => {
|
2026-05-26 11:13:14 +02:00
|
|
|
mock.onGet('/simulations/7').reply(200, { ...BASE_SIM, status: 'in_progress' });
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
2026-05-26 16:08:46 +02:00
|
|
|
expect(screen.getByRole('button', { name: /Mark for review/i })).toBeInTheDocument();
|
2026-05-26 11:13:14 +02:00
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
it('shows "Close" button when status is review_required', async () => {
|
2026-05-26 11:13:14 +02:00
|
|
|
mock.onGet('/simulations/7').reply(200, { ...BASE_SIM, status: 'review_required' });
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
2026-05-26 16:08:46 +02:00
|
|
|
expect(screen.getByRole('button', { name: /^Close$/i })).toBeInTheDocument();
|
2026-05-26 11:13:14 +02:00
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
it('shows "Delete" button for redteam', async () => {
|
2026-05-26 11:13:14 +02:00
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
2026-05-26 16:08:46 +02:00
|
|
|
expect(screen.getByRole('button', { name: /^Delete$/i })).toBeInTheDocument();
|
2026-05-26 11:13:14 +02:00
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
describe('SimulationFormPage — SOC role + pending (blocked)', () => {
|
|
|
|
|
let mock: MockAdapter;
|
|
|
|
|
|
|
|
|
|
beforeEach(() => {
|
|
|
|
|
mockRole = 'soc';
|
|
|
|
|
mock = new MockAdapter(apiClient);
|
|
|
|
|
mock.onGet('/simulations/7').reply(200, BASE_SIM);
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
afterEach(() => {
|
|
|
|
|
mock.restore();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('shows the SOC blocked banner', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByTestId('soc-blocked-banner')).toBeInTheDocument();
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('SOC inputs are disabled when status is pending', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByLabelText(/Log source/i)).toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
expect(screen.getByLabelText(/Incident number/i)).toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('Red Team inputs are disabled for SOC', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByLabelText(/^Name/i)).toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
expect(screen.getByLabelText(/Description/i)).toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
describe('SimulationFormPage — SOC role + review_required (can edit SOC fields)', () => {
|
|
|
|
|
let mock: MockAdapter;
|
|
|
|
|
|
|
|
|
|
beforeEach(() => {
|
|
|
|
|
mockRole = 'soc';
|
|
|
|
|
mock = new MockAdapter(apiClient);
|
|
|
|
|
mock.onGet('/simulations/7').reply(200, { ...BASE_SIM, status: 'review_required' });
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
afterEach(() => {
|
|
|
|
|
mock.restore();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('SOC inputs are enabled when status is review_required', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByLabelText(/Log source/i)).not.toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
expect(screen.getByLabelText(/Incident number/i)).not.toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('Red Team inputs remain disabled for SOC even when review_required', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByLabelText(/^Name/i)).toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('does not show the blocked banner when status is review_required', async () => {
|
|
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
|
|
|
|
expect(screen.getByLabelText(/Log source/i)).not.toBeDisabled();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
expect(screen.queryByTestId('soc-blocked-banner')).toBeNull();
|
|
|
|
|
});
|
|
|
|
|
|
2026-05-26 16:08:46 +02:00
|
|
|
it('shows "Close" for SOC when review_required', async () => {
|
2026-05-26 11:13:14 +02:00
|
|
|
renderWithProviders(<EditPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/7/edit'] },
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
await waitFor(() => {
|
2026-05-26 16:08:46 +02:00
|
|
|
expect(screen.getByRole('button', { name: /^Close$/i })).toBeInTheDocument();
|
2026-05-26 11:13:14 +02:00
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
describe('SimulationFormPage — new simulation', () => {
|
|
|
|
|
let mock: MockAdapter;
|
|
|
|
|
|
|
|
|
|
beforeEach(() => {
|
|
|
|
|
mockRole = 'redteam';
|
|
|
|
|
mock = new MockAdapter(apiClient);
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
afterEach(() => {
|
|
|
|
|
mock.restore();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
it('renders the new simulation form with name field', () => {
|
|
|
|
|
renderWithProviders(<NewPage />, {
|
|
|
|
|
routerProps: { initialEntries: ['/engagements/42/simulations/new'] },
|
|
|
|
|
});
|
|
|
|
|
expect(screen.getByLabelText(/^Name/i)).toBeInTheDocument();
|
|
|
|
|
expect(screen.getByRole('button', { name: /Create simulation/i })).toBeInTheDocument();
|
|
|
|
|
});
|
|
|
|
|
});
|