Function test_ssh_activity_builder

crates/openshell-ocsf/src/builders/ssh.rs:107–124

()

    #[test]
    fn test_ssh_activity_builder() {
        let ctx = test_sandbox_context();
        let event = SshActivityBuilder::new(&ctx)
            .activity(ActivityId::Open)
            .action(ActionId::Allowed)
            .disposition(DispositionId::Allowed)
            .severity(SeverityId::Informational)
            .src_endpoint_addr("10.42.0.1".parse().unwrap(), 48201)
            .auth_type(AuthTypeId::Other, "NSSH1")
            .protocol_ver("NSSH1")
            .message("SSH handshake accepted via NSSH1")
            .build();

        let json = event.to_json().unwrap();
        assert_eq!(json["class_uid"], 4007);
        assert_eq!(json["auth_type"], "NSSH1");
        assert_eq!(json["auth_type_id"], 99);
    }
}