mirror of https://github.com/hashicorp/boundary
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
257 lines
7.1 KiB
257 lines
7.1 KiB
package groups_test
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/hashicorp/boundary/api"
|
|
"github.com/hashicorp/boundary/api/groups"
|
|
"github.com/hashicorp/boundary/api/scopes"
|
|
"github.com/hashicorp/boundary/api/users"
|
|
"github.com/hashicorp/boundary/internal/iam"
|
|
"github.com/hashicorp/boundary/internal/servers/controller"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestGroup_List(t *testing.T) {
|
|
assert, require := assert.New(t), require.New(t)
|
|
orgId := "o_1234567890"
|
|
amId := "paum_1234567890"
|
|
tc := controller.NewTestController(t, &controller.TestControllerOpts{
|
|
DisableAuthorizationFailures: true,
|
|
DefaultOrgId: orgId,
|
|
DefaultAuthMethodId: amId,
|
|
DefaultLoginName: "user",
|
|
DefaultPassword: "passpass",
|
|
})
|
|
defer tc.Shutdown()
|
|
|
|
client := tc.Client()
|
|
|
|
proj, apiErr, err := scopes.NewScopesClient(client).Create(tc.Context(), orgId)
|
|
require.NoError(err)
|
|
require.Nil(apiErr)
|
|
|
|
projClient := client.Clone()
|
|
projClient.SetScopeId(proj.Id)
|
|
|
|
cases := []struct {
|
|
name string
|
|
scopeClient *api.Client
|
|
}{
|
|
{
|
|
name: "org",
|
|
scopeClient: client,
|
|
},
|
|
{
|
|
name: "proj",
|
|
scopeClient: projClient,
|
|
},
|
|
}
|
|
|
|
for _, tt := range cases {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
grps := groups.NewGroupsClient(tt.scopeClient)
|
|
pl, apiErr, err := grps.List(tc.Context())
|
|
assert.NoError(err)
|
|
assert.Nil(apiErr)
|
|
assert.Empty(pl)
|
|
|
|
expected := make([]*groups.Group, 10)
|
|
for i := 0; i < 10; i++ {
|
|
expected[i], apiErr, err = grps.Create(tc.Context(), groups.WithName(fmt.Sprint(i)))
|
|
require.NoError(err)
|
|
assert.Nil(apiErr)
|
|
}
|
|
pl, apiErr, err = grps.List(tc.Context())
|
|
require.NoError(err)
|
|
assert.Nil(apiErr)
|
|
require.NotNil(pl)
|
|
require.Len(pl, 10)
|
|
assert.ElementsMatch(comparableSlice(expected), comparableSlice(pl))
|
|
})
|
|
}
|
|
}
|
|
|
|
func comparableSlice(in []*groups.Group) []groups.Group {
|
|
var filtered []groups.Group
|
|
for _, i := range in {
|
|
p := groups.Group{
|
|
Id: i.Id,
|
|
Name: i.Name,
|
|
Description: i.Description,
|
|
CreatedTime: i.CreatedTime,
|
|
UpdatedTime: i.UpdatedTime,
|
|
}
|
|
filtered = append(filtered, p)
|
|
}
|
|
return filtered
|
|
}
|
|
|
|
func TestGroup_Crud(t *testing.T) {
|
|
assert, require := assert.New(t), require.New(t)
|
|
orgId := "o_1234567890"
|
|
amId := "paum_1234567890"
|
|
tc := controller.NewTestController(t, &controller.TestControllerOpts{
|
|
DisableAuthorizationFailures: true,
|
|
DefaultOrgId: orgId,
|
|
DefaultAuthMethodId: amId,
|
|
DefaultLoginName: "user",
|
|
DefaultPassword: "passpass",
|
|
})
|
|
defer tc.Shutdown()
|
|
|
|
client := tc.Client()
|
|
|
|
proj, apiErr, err := scopes.NewScopesClient(client).Create(tc.Context(), orgId)
|
|
require.NoError(err)
|
|
require.Nil(apiErr)
|
|
|
|
projClient := client.Clone()
|
|
projClient.SetScopeId(proj.Id)
|
|
|
|
checkGroup := func(step string, g *groups.Group, apiErr *api.Error, err error, wantedName string, wantedVersion uint32, expectedUserIds []string) {
|
|
require.NoError(err, step)
|
|
if !assert.Nil(apiErr, step) && apiErr.Message != "" {
|
|
t.Errorf("ApiError message: %q", apiErr.Message)
|
|
}
|
|
assert.NotNil(g, "returned no resource", step)
|
|
gotName := ""
|
|
if g.Name != "" {
|
|
gotName = g.Name
|
|
}
|
|
assert.Equal(wantedName, gotName, step)
|
|
assert.EqualValues(wantedVersion, g.Version)
|
|
assert.Equal(len(expectedUserIds), len(g.MemberIds))
|
|
if len(expectedUserIds) > 0 {
|
|
assert.EqualValues(expectedUserIds, g.MemberIds)
|
|
}
|
|
}
|
|
|
|
cases := []struct {
|
|
name string
|
|
scopeClient *api.Client
|
|
}{
|
|
{
|
|
name: "org",
|
|
scopeClient: client,
|
|
},
|
|
{
|
|
name: "proj",
|
|
scopeClient: projClient,
|
|
},
|
|
}
|
|
|
|
user1, apiErr, err := users.NewUsersClient(client).Create(tc.Context())
|
|
require.NoError(err)
|
|
require.Nil(apiErr)
|
|
|
|
user2, apiErr, err := users.NewUsersClient(client).Create(tc.Context())
|
|
require.NoError(err)
|
|
require.Nil(apiErr)
|
|
|
|
for _, tt := range cases {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
groupsClient := groups.NewGroupsClient(tt.scopeClient)
|
|
g, apiErr, err := groupsClient.Create(tc.Context(), groups.WithName("foo"))
|
|
checkGroup("create", g, apiErr, err, "foo", 1, nil)
|
|
|
|
g, apiErr, err = groupsClient.Read(tc.Context(), g.Id)
|
|
checkGroup("read", g, apiErr, err, "foo", 1, nil)
|
|
|
|
g, apiErr, err = groupsClient.Update(tc.Context(), g.Id, g.Version, groups.WithName("bar"))
|
|
checkGroup("update", g, apiErr, err, "bar", 2, nil)
|
|
|
|
g, apiErr, err = groupsClient.Update(tc.Context(), g.Id, g.Version, groups.DefaultName())
|
|
checkGroup("update", g, apiErr, err, "", 3, nil)
|
|
|
|
g, apiErr, err = groupsClient.AddMembers(tc.Context(), g.Id, g.Version, []string{user1.Id})
|
|
checkGroup("update", g, apiErr, err, "", 4, []string{user1.Id})
|
|
|
|
g, apiErr, err = groupsClient.SetMembers(tc.Context(), g.Id, g.Version, []string{user2.Id})
|
|
checkGroup("update", g, apiErr, err, "", 5, []string{user2.Id})
|
|
|
|
g, apiErr, err = groupsClient.RemoveMembers(tc.Context(), g.Id, g.Version, []string{user2.Id})
|
|
checkGroup("update", g, apiErr, err, "", 6, nil)
|
|
|
|
existed, apiErr, err := groupsClient.Delete(tc.Context(), g.Id)
|
|
assert.NoError(err)
|
|
assert.True(existed, "Expected existing user when deleted, but it wasn't.")
|
|
|
|
existed, apiErr, err = groupsClient.Delete(tc.Context(), g.Id)
|
|
assert.NoError(err)
|
|
assert.False(existed, "Expected user to not exist when deleted, but it did.")
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestGroup_Errors(t *testing.T) {
|
|
assert, require := assert.New(t), require.New(t)
|
|
orgId := "o_1234567890"
|
|
amId := "paum_1234567890"
|
|
tc := controller.NewTestController(t, &controller.TestControllerOpts{
|
|
DisableAuthorizationFailures: true,
|
|
DefaultOrgId: orgId,
|
|
DefaultAuthMethodId: amId,
|
|
DefaultLoginName: "user",
|
|
DefaultPassword: "passpass",
|
|
})
|
|
defer tc.Shutdown()
|
|
|
|
client := tc.Client()
|
|
|
|
proj, apiErr, err := scopes.NewScopesClient(client).Create(tc.Context(), orgId)
|
|
require.NoError(err)
|
|
require.Nil(apiErr)
|
|
|
|
projClient := client.Clone()
|
|
projClient.SetScopeId(proj.Id)
|
|
|
|
cases := []struct {
|
|
name string
|
|
scopeClient *api.Client
|
|
}{
|
|
{
|
|
name: "org",
|
|
scopeClient: client,
|
|
},
|
|
{
|
|
name: "proj",
|
|
scopeClient: projClient,
|
|
},
|
|
}
|
|
|
|
for _, tt := range cases {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
groupClient := groups.NewGroupsClient(tt.scopeClient)
|
|
|
|
g, apiErr, err := groupClient.Create(tc.Context(), groups.WithName("first"))
|
|
require.NoError(err)
|
|
assert.Nil(apiErr)
|
|
assert.NotNil(g)
|
|
|
|
// Create another resource with the same name.
|
|
_, apiErr, err = groupClient.Create(tc.Context(), groups.WithName("first"))
|
|
require.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
|
|
_, apiErr, err = groupClient.Read(tc.Context(), iam.GroupPrefix+"_doesntexis")
|
|
require.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
assert.EqualValues(http.StatusNotFound, apiErr.Status)
|
|
|
|
_, apiErr, err = groupClient.Read(tc.Context(), "invalid id")
|
|
require.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
assert.EqualValues(http.StatusForbidden, apiErr.Status)
|
|
|
|
_, apiErr, err = groupClient.Update(tc.Context(), g.Id, g.Version)
|
|
require.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
assert.EqualValues(http.StatusBadRequest, apiErr.Status)
|
|
})
|
|
}
|
|
}
|