Timothy Messier
0f19009cea
This adds new columns to the wh_user_dimension to provide additional
data from OIDC that does not apply to Password Auth.
Note: Given the specifics of the data, it is possible these columns may
be used by other auth methods in the future, hence the lack of `oidc` in
the column names.
The specific columns are:
- auth_method_external_id
For OIDC this is the Issuer
- auth_account_external_id
For OIDC this is the Subject
- auth_account_full_name
For OIDC this is the account's Full Name, and can be `None`.
- auth_account_email
For OIDC this is the account's Email, and can be `None`.
For all of these new columns, they will be `Not Applicable` if the auth
method is Password.
70 lines
2.9 KiB
PL/PgSQL
70 lines
2.9 KiB
PL/PgSQL
-- source tests teh whx_user_dimension_source view.
|
|
begin;
|
|
select plan(5);
|
|
select wtt_load('widgets', 'iam', 'kms', 'auth', 'hosts', 'targets');
|
|
|
|
-- auth_password_account
|
|
select is(s.*, row(
|
|
'u_____walter', 'Walter', 'None',
|
|
'apa___walter', 'password auth account', 'None', 'None',
|
|
'Not Applicable', 'Not Applicable', 'Not Applicable',
|
|
'apm___widget', 'password auth method', 'Widget Auth Password', 'None',
|
|
'Not Applicable',
|
|
'o_____widget', 'Widget Inc', 'None'
|
|
)::whx_user_dimension_source)
|
|
from whx_user_dimension_source as s
|
|
where s.user_id = 'u_____walter'
|
|
and s.auth_account_id = 'apa___walter';
|
|
|
|
select is(s.*, row(
|
|
'u_____walter', 'Walter', 'None',
|
|
'apa1__walter', 'password auth account', 'None', 'None',
|
|
'Not Applicable', 'Not Applicable', 'Not Applicable',
|
|
'apm1__widget', 'password auth method', 'Widget Auth Password 1', 'None',
|
|
'Not Applicable',
|
|
'o_____widget', 'Widget Inc', 'None'
|
|
)::whx_user_dimension_source)
|
|
from whx_user_dimension_source as s
|
|
where s.user_id = 'u_____walter'
|
|
and s.auth_account_id = 'apa1__walter';
|
|
|
|
select is(s.*, row(
|
|
'u_____warren', 'Warren', 'None',
|
|
'apa___warren', 'password auth account', 'None', 'None',
|
|
'Not Applicable', 'Not Applicable', 'Not Applicable',
|
|
'apm___widget', 'password auth method', 'Widget Auth Password', 'None',
|
|
'Not Applicable',
|
|
'o_____widget', 'Widget Inc', 'None'
|
|
)::whx_user_dimension_source)
|
|
from whx_user_dimension_source as s
|
|
where s.user_id = 'u_____warren'
|
|
and s.auth_account_id = 'apa___warren';
|
|
|
|
-- auth_oidc_account
|
|
select is(s.*, row(
|
|
'u_____walter', 'Walter', 'None',
|
|
'aoa___walter', 'oidc auth account', 'walter account', 'Walter OIDC Account',
|
|
'sub___walter', 'Walter', 'walter@widget.test',
|
|
'aom___widget', 'oidc auth method', 'Widget OIDC', 'None',
|
|
'https://oidc.widget.test',
|
|
'o_____widget', 'Widget Inc', 'None'
|
|
)::whx_user_dimension_source)
|
|
from whx_user_dimension_source as s
|
|
where s.user_id = 'u_____walter'
|
|
and s.auth_account_id = 'aoa___walter';
|
|
|
|
select is(s.*, row(
|
|
'u_____warren', 'Warren', 'None',
|
|
'aoa___warren', 'oidc auth account', 'warren account', 'Warren OIDC Account',
|
|
'sub___warren', 'None', 'None',
|
|
'aom___widget', 'oidc auth method', 'Widget OIDC', 'None',
|
|
'https://oidc.widget.test',
|
|
'o_____widget', 'Widget Inc', 'None'
|
|
)::whx_user_dimension_source)
|
|
from whx_user_dimension_source as s
|
|
where s.user_id = 'u_____warren'
|
|
and s.auth_account_id = 'aoa___warren';
|
|
|
|
select * from finish();
|
|
rollback;
|