sharepoint-cli 0.0.9

Agent-friendly SharePoint Online CLI with JSON output, structured exit codes, and schema introspection
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use assert_cmd::Command;
use predicates::str::contains;
use sharepoint_cli::graph::{Cursor, encode_cursor};

#[test]
fn page_token_pointing_at_attacker_host_is_rejected() {
    let cursor = Cursor {
        next: Some("https://attacker.example/v1.0/sites?$skiptoken=evil".to_string()),
        skip: 0,
    };
    let token = encode_cursor(&cursor);

    let dir = tempfile::tempdir().unwrap();

    Command::cargo_bin("sharepoint")
        .unwrap()
        .env_clear()
        .env("PATH", std::env::var("PATH").unwrap_or_default())
        .env("HOME", dir.path())
        .env("XDG_CONFIG_HOME", dir.path())
        .env("XDG_CACHE_HOME", dir.path())
        .env(
            "MICROSOFT_GRAPH_ENDPOINT",
            "https://graph.microsoft.com/v1.0",
        )
        .env(
            "SHAREPOINT_TENANT_ID",
            "11111111-1111-1111-1111-111111111111",
        )
        .env("SHAREPOINT_CLIENT_ID", "client-1")
        .args(["--output", "json", "sites", "list", "--page", &token])
        .assert()
        .code(2)
        // Per the spec, errors go to stderr; the JSON envelope is the last line.
        .stderr(contains("host"));
}