Commit 39129e19 authored by Jorge Moratinos's avatar Jorge Moratinos
Browse files

Merge branch... 

Merge branch 'OCF-Doc77-include-update-of-several-tests-due-to-security-improvements' into 'develop'

Update error response details in test plans and Release Notes

See merge request !80
parents 6647d715 a8e6dc01

doc/releasenotes.md

+5 −0
Original line number Diff line number Diff line
@@ -46,10 +46,15 @@ Additionally, this change includes minor improvements such as correctly setting 
- 2 New tests related with use of same apiName across different AEFs.

- Duplicate test name capif_api_provider_management-10 changed.



#### **Security Issues**



- **Critical Authorization Bypass** vulnerability solved.



### **Documentation**



- 2 New tests added to [OCF Publish API test plan documentation], related with apiName.

- Changed name of capif_api_provider_management-10 to Update Registered Api Provider Without SuppFeat field

- Updated expected **ProblemDetails** `detail` and `cause` error messages in test plan documentation for Discover, Events, Invoker Management, Provider Management, and Publish services to align responses with current certificate and ID validation behavior.



## **Release 4.0.0**

doc/testing/testplan/api_discover_service/README.md

+2 −2
Original line number Diff line number Diff line
@@ -157,8 +157,8 @@ At this documentation you will have all information and related files and exampl 
     2. Error Response Body must accomplish with **ProblemDetails** data structure with:

        * status 404

        * title with message "Not Found"

        * detail with message "API Invoker does not exist".

        * cause with message "API Invoker id not found".

        * detail with message "Please provide an existing Network App ID".

        * cause with message "Certificate not found for invoker".





## Test Case 4: Discover Published service APIs by registered API Invoker with 1 result filtered

doc/testing/testplan/api_events_service/README.md

+4 −4
Original line number Diff line number Diff line
@@ -86,8 +86,8 @@ At this documentation you will have all information and related files and exampl 
     2. Error Response Body must accomplish with **ProblemDetails** data structure with:

        * status 404

        * title with message "Not Found"

        * detail with message "Invoker or APF or AEF or AMF Not found".

        * cause with message "Subscriber Not Found".

        * detail with message "Please provide an existing Subscriber ID".

        * cause with message "Certificate not found for Invoker or APF or AEF or AMF".



  3. Event Subscriptions are not stored in CAPIF Database
@@ -197,8 +197,8 @@ At this documentation you will have all information and related files and exampl 


     * status 404

     * title with message "Not Found"

     * detail with message "Invoker or APF or AEF or AMF Not found".

     * cause with message "Subscriber Not Found".

     * detail with message "Please provide an existing Subscriber ID".

     * cause with message "Certificate not found for Invoker or APF or AEF or AMF".



---

## Test Case 5: Deletes an individual CAPIF Event Subscription with invalid SubscriptionId

doc/testing/testplan/api_invoker_management/README.md

+2 −2
Original line number Diff line number Diff line
@@ -173,7 +173,7 @@ At this documentation you will have all information and related files and exampl 
        * status 404

        * title with message "Not Found"

        * detail with message "Please provide an existing Network App ID".

        * cause with message "Not exist Network App ID".

        * cause with message "Network App ID does not exist".





## Test Case 5: Offboard Network App
@@ -243,7 +243,7 @@ At this documentation you will have all information and related files and exampl 
        * status 404

        * title with message "Not Found"

        * detail with message "Please provide an existing Network App ID".

        * cause with message "Not exist Network App ID".

        * cause with message "Network App ID does not exist".



## Test Case 7: Update Onboarded Network App Certificate

doc/testing/testplan/api_provider_management/README.md

+6 −6
Original line number Diff line number Diff line
@@ -198,8 +198,8 @@ At this documentation you will have all information and related files and exampl 
     2. body returned must accomplish **ProblemDetails** data structure, with:

        * status 404

        * title with message "Not Found"

        * detail with message "Not Exist Provider Enrolment Details".

        * cause with message "Not found registrations to Send **THIS** api provider details".

        * detail with message "Please provide an existing API Provider ID".

        * cause with message "API Provider ID does not exist".





## Test Case 5: Partially Update Registered Api Provider
@@ -300,8 +300,8 @@ At this documentation you will have all information and related files and exampl 


        * status 404

        * title with message "Not Found"

        * detail with message "Not Exist Provider Enrolment Details".

        * cause with message "Not found registrations to Send **THIS** api provider details".

        * detail with message "Please provide an existing API Provider ID".

        * cause with message "API Provider ID does not exist".





## Test Case 7: Delete Registered Api Provider
@@ -396,8 +396,8 @@ At this documentation you will have all information and related files and exampl 
     2. body returned must accomplish **ProblemDetails** data structure, with:

        * status 404

        * title with message "Not Found"

        * detail with message "Not Exist Provider Enrolment Details".

        * cause with message "Not found registrations to Send **THIS** api provider details".

        * detail with message "Please provide an existing API Provider ID".

        * cause with message "API Provider ID does not exist".





## Test Case 9: Onboard provider without supported_features