feat(managedgroups): Classify resources for audit events

internal/tests/api/managedgroups/classification_test.go

@@ -0,0 +1,107 @@
+package managedgroups_test
+
+import (
+	"context"
+	"encoding/json"
+	"testing"
+	"time"
+
+	"github.com/hashicorp/boundary/sdk/pbs/controller/api"
+	pb "github.com/hashicorp/boundary/sdk/pbs/controller/api/resources/managedgroups"
+	"github.com/hashicorp/boundary/sdk/pbs/controller/api/resources/scopes"
+	"github.com/hashicorp/boundary/sdk/wrapper"
+	"github.com/hashicorp/eventlogger"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"google.golang.org/protobuf/types/known/timestamppb"
+	"google.golang.org/protobuf/types/known/wrapperspb"
+)
+
+func TestGroupsClassification(t *testing.T) {
+	ctx := context.Background()
+	now := time.Now()
+	pbNow := timestamppb.Now()
+	wrapper := wrapper.TestWrapper(t)
+	testEncryptingFilter := api.NewEncryptFilter(t, wrapper)
+
+	cases := []struct {
+		name string
+		in   *eventlogger.Event
+		want *eventlogger.Event
+	}{
+		{
+			name: "validate-group-filtering",
+			in: &eventlogger.Event{
+				Type:      "test",
+				CreatedAt: now,
+				Payload: &pb.ManagedGroup{
+					Id: "id",
+					Scope: &scopes.ScopeInfo{
+						Id:            "scope-id",
+						Type:          "scope-type",
+						Name:          "scope-name",
+						Description:   "description",
+						ParentScopeId: "parent-scope-id",
+					},
+					Name:         &wrapperspb.StringValue{Value: "name"},
+					Description:  &wrapperspb.StringValue{Value: "descrption"},
+					CreatedTime:  pbNow,
+					UpdatedTime:  pbNow,
+					Version:      0,
+					Type:         "oidc",
+					AuthMethodId: "auth-method-id",
+					Attrs: &pb.ManagedGroup_OidcManagedGroupAttributes{
+						OidcManagedGroupAttributes: &pb.OidcManagedGroupAttributes{
+							Filter: "filter",
+						},
+					},
+					MemberIds:         []string{"member-id-1", "member-id-2"},
+					AuthorizedActions: []string{"action1", "action2"},
+				},
+			},
+			want: &eventlogger.Event{
+				Type:      "test",
+				CreatedAt: now,
+				Payload: &pb.ManagedGroup{
+					Id: "id",
+					Scope: &scopes.ScopeInfo{
+						Id:            "scope-id",
+						Type:          "scope-type",
+						Name:          "scope-name",
+						Description:   "description",
+						ParentScopeId: "parent-scope-id",
+					},
+					Name:         &wrapperspb.StringValue{Value: "name"},
+					Description:  &wrapperspb.StringValue{Value: "descrption"},
+					CreatedTime:  pbNow,
+					UpdatedTime:  pbNow,
+					Version:      0,
+					Type:         "oidc",
+					AuthMethodId: "auth-method-id",
+					Attrs: &pb.ManagedGroup_OidcManagedGroupAttributes{
+						OidcManagedGroupAttributes: &pb.OidcManagedGroupAttributes{
+							Filter: "filter",
+						},
+					},
+					MemberIds:         []string{"member-id-1", "member-id-2"},
+					AuthorizedActions: []string{"action1", "action2"},
+				},
+			},
+		},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			assert, require := assert.New(t), require.New(t)
+			got, err := testEncryptingFilter.Process(ctx, tc.in)
+			require.NoError(err)
+			require.NotNil(got)
+			gotJSON, err := json.Marshal(got)
+			require.NoError(err)
+
+			wantJSON, err := json.Marshal(tc.want)
+			require.NoError(err)
+			assert.JSONEq(string(wantJSON), string(gotJSON))
+		})
+	}
+}