Invoke-PASAccountPasswordChange.Tests.ps1

BeforeAll {
    . $PSScriptRoot/Invoke-PASAccountPasswordChange.ps1

    $AAMClientPath = 'C:\Program Files (x86)\CyberArk\ApplicationPasswordSdk\CLIPasswordSDK.exe'
    $CredentialClixmlPath = 'TestDrive:\Credential.ps1.credential'

    New-Object System.Management.Automation.PSCredential('DemoUser', ('DemoPass' | ConvertTo-SecureString -AsPlainText -Force)) | Export-Clixml -Path $CredentialClixmlPath
}

Describe 'Invoke-PASAccountPasswordChange' {
    It 'invokes an immediate password change' {
        Mock Test-Path -MockWith { return $True } -ModuleName CredentialRetriever
        Mock Get-AIMCredential -MockWith {
            $OutputObject = [PSCustomObject]@{
                Password = 'DemoPass'
                UserName = 'DemoUser'
                Address  = 'DOMAIN.COM'
            }
            # Stolen from https://github.com/pspete/CredentialRetriever/blob/da1ce35bb2a317c903b0e895ffd9f6ae55f113f2/CredentialRetriever/Functions/Get-AIMCredential.ps1#L300
            $OutputObject | Add-Member -MemberType ScriptMethod -Name ToSecureString -Value {
                $this.Password | ConvertTo-SecureString -AsPlainText -Force
            } -Force
            # Stolen from https://github.com/pspete/CredentialRetriever/blob/da1ce35bb2a317c903b0e895ffd9f6ae55f113f2/CredentialRetriever/Functions/Get-AIMCredential.ps1#L307
            $OutputObject | Add-Member -MemberType ScriptMethod -Name ToCredential -Value {
                New-Object System.Management.Automation.PSCredential($this.UserName, $this.ToSecureString())
            } -Force
            return $OutputObject
        }
        Mock New-PASSession -MockWith {}
        Mock Close-PASSession -MockWith {}
        Mock Invoke-PASCPMOperation -MockWith {}

        Invoke-PASAccountPasswordChange -AccountId 1_1 -CredentialProviderPath $AAMClientPath -AppID scheduledPasswordChange `
            -PvwaAddress https://comp01 -NewCredentialClixmlPath $CredentialClixmlPath -Safe CyberArk `
            -UserName serviceAccount01 -Address 192.168.0.50

        Should -Invoke -CommandName Invoke-PASCPMOperation -ParameterFilter { $ChangeImmediately -eq $true -and $ChangeTask }
    }
}