Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ng-auto-moq
Advanced tools
Unit tests reflector that automatically mocks dependencies with moq.ts for angular units
:warning: Starting with the 6 version the package follows new standard of APF. Which introduced support of ES modules and drops commonjs.
This is a special angular injector builder for unit testing purposes. It creates an injector configuration that automatically mocks all dependencies of tested unit with moq.ts.
It can be used with angular TestBed class and with a regular injector.
Here is adapted test configuration example from the official angular documentation.
import "core-js/proposals/reflect-metadata";
import { moqInjectorProvidersFactory, resolveMock } from "ng-auto-moq";
import { MoqAPI } from "moq.ts";
@Injectable()
export class MasterService {
constructor(private valueService: ValueService) {
}
getValue() {
return this.valueService.getValue();
}
}
@Injectable()
export class ValueService {
getValue() {
return 10;
}
}
let masterService: MasterService;
let valueService: ValueService;
beforeEach(() => {
const moqInjectorProviders = moqInjectorProvidersFactory();
TestBed.configureTestingModule({
// Provide both the service-to-test and its (moq) dependency
providers: moqInjectorProviders(MasterService)
});
// Inject both the service-to-test and its (spy) dependency
masterService = TestBed.get(MasterService);
valueService = TestBed.get(ValueService);
(valueService[MoqAPI] as IMock<ValueService>)
.setup(instance => instance.getValue())
.returns(-1);
//or
resolveMock(ValueService, TestBed.get(Injector))
.setup(instance => instance.getValue())
.returns(-1);
});
Services testing could be also done in simplified manner with a regular injector. With this approach tests could be performed in nodejs environment without involving a browser. It gives performance improvement and less dependencies should be install, suits well for CI environment. If you are using jasmine just run it from command prompt with the following command:
jasmine *.spec.js
import "reflect-metadata";
import { moqInjectorProvidersFactory, resolveMock } from "ng-auto-moq";
import { It } from "moq.ts";
import { Injectable, Injector } from "@angular/core";
@Injectable()
export class ValueService {
getValue(options: { value: number }) {
return options.value * 10;
}
}
@Injectable()
export class MasterService {
constructor(private valueService: ValueService) {
}
getValue(value: number) {
return this.valueService.getValue({value});
}
}
describe("Integration test", () => {
let injector: Injector;
beforeEach(() => {
const moqInjectorProviders = moqInjectorProvidersFactory();
const providers = moqInjectorProviders(MasterService);
injector = Injector.create({providers});
});
it("Returns provided value", () => {
// setup section
resolveMock(ValueService, injector)
// the options object should be compared with deep equal logic or any other custom logic
// the default comparision would not work since for objects it uses reference comparing
.setup(instance => instance.getValue(It.Is(opt => expect(opt).toEqual({value: 1}))))
.returns(-1);
//action section
const tested = injector.get(MasterService);
const actual = tested.getValue(1);
//assertion section
expect(actual).toBe(-1);
});
});
With options of moqInjectorProviders you can control how dependencies are configured. Let's say you have a class with @Optional dependency, and you want to test both cases when the dependency is available and when it isn't.
import "reflect-metadata";
import { moqInjectorProviders, DefaultProviderFactory, IParameter, ProviderFactory } from "ng-auto-moq";
@Injectable()
export class MasterService {
constructor(@Optional() private valueService: ValueService) {
}
getValue() {
return this.valueService ? this.valueService.getValue() : -1;
}
}
it("Returns provided value when optional dependencies are not available", () => {
// setup section
const providerFactory: ProviderFactory = (parameter: IParameter, mocked: Type<any>, defaultProviderFactory: DefaultProviderFactory) => {
if (parameter.optional === true) {
return undefined;
}
return defaultProviderFactory(parameter, mocked);
};
const providers = moqInjectorProviders(MasterService, {providerFactory});
const injector = Injector.create({providers});
//action section
const tested = injector.get(MasterService);
const actual = tested.getValue();
//assertion section
expect(actual).toBe(-1);
})
Another option is mockFactory that allows to customize the dependency mocking process. You can pre configure the mock and decide to throw an exception when interaction with the mocked object is not expected.
import "reflect-metadata";
import { moqInjectorProvidersFactory, MockFactory, IParameter } from "ng-auto-moq";
import { It } from "moq.ts";
import { InjectionToken } from "@angular/core";
let injector: Injector;
beforeEach(() => {
const mockFactory = (defaultMockFactory) => {
(parameter: IParameter) => {
return defaultMockFactory(parameter)
.setup(() => It.IsAny())
.throws(new Error("setup is missed"));
};
};
const defaultMockFactoryToken = new InjectionToken("DefaultMockFactory");
const moqInjectorProviders = moqInjectorProvidersFactory({
providers: [
// re-register the MockFactory under a new token
{provide: defaultMockFactoryToken, useClass: MockFactory, deps: []},
// override the MockFactory token
{provide: MockFactory, useFactory: mockFactory, deps: [defaultMockFactoryToken]},
]
});
injector = Injector.create(moqInjectorProviders(MasterService));
});
it("Throws an exception", () => {
//action section
const tested = injector.get(MasterService);
//assertion section
expect(() => tested.getValue()).toThrow();
})
With jest-preset-angular or tsickle decorators are removed from the compiled code. The libraries like reflect-metadata or core-js/proposals/reflect-metadata could not return metadata that describes unit dependencies. Fortunately, it is saved in a static property called ctorParameters. The library provides a build in solution:
import "reflect-metadata";
import { MockFactory, IParameter } from "ng-auto-moq";
import { moqInjectorProvidersFactory } from "ng-auto-moq/jest";
import { It } from "moq.ts";
import { InjectionToken } from "@angular/core";
let injector: Injector;
beforeEach(() => {
const mockFactory = (defaultMockFactory) => {
(parameter: IParameter) => {
return defaultMockFactory(parameter)
.setup(() => It.IsAny())
.throws(new Error("setup is missed"));
};
};
const defaultMockFactoryToken = new InjectionToken("DefaultMockFactory");
const moqInjectorProviders = moqInjectorProvidersFactory({
providers: [
// re-register the MockFactory under a new token
{provide: defaultMockFactoryToken, useClass: MockFactory, deps: []},
// override the MockFactory token
{provide: MockFactory, useFactory: mockFactory, deps: [defaultMockFactoryToken]},
]
});
injector = Injector.create(moqInjectorProviders(MasterService));
});
it("Throws an exception", () => {
//action section
const tested = injector.get(MasterService);
//assertion section
expect(() => tested.getValue()).toThrow();
})
FAQs
Unit tests reflector that automatically mocks dependencies with moq.ts for angular units
The npm package ng-auto-moq receives a total of 3 weekly downloads. As such, ng-auto-moq popularity was classified as not popular.
We found that ng-auto-moq demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.