Michael Gaffney
c317901db4
This change adds a credential type attribute to credential library and allows it to be set when creating a credential library. Specifying the type of credential returned from a library allows for new features and additional error checking to be added over time. A User Password credential type and an Unspecified credential type are included with the expectation that additional credential types will be added in the future. This change also adds the credential type attribute to existing credential libraries and sets it to Unspecified. Known Limitations: - Credential type is only supported on the repository create method. Support for the other CRUD methods will be added in the future.
112 lines
3.6 KiB
Go
112 lines
3.6 KiB
Go
package vault
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/hashicorp/boundary/internal/credential"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func Test_GetOpts(t *testing.T) {
|
|
t.Parallel()
|
|
t.Run("WithName", func(t *testing.T) {
|
|
opts := getOpts(WithName("test"))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withName = "test"
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithDescription", func(t *testing.T) {
|
|
opts := getOpts(WithDescription("test desc"))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withDescription = "test desc"
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithLimit", func(t *testing.T) {
|
|
opts := getOpts(WithLimit(5))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withLimit = 5
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithCACert", func(t *testing.T) {
|
|
opts := getOpts(WithCACert([]byte("test cert")))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withCACert = []byte("test cert")
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithNamespace", func(t *testing.T) {
|
|
opts := getOpts(WithNamespace("namespace"))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withNamespace = "namespace"
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithTlsServerName", func(t *testing.T) {
|
|
opts := getOpts(WithTlsServerName("server"))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withTlsServerName = "server"
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithTlsSkipVerify", func(t *testing.T) {
|
|
opts := getOpts(WithTlsSkipVerify(true))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withTlsSkipVerify = true
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithClientCert", func(t *testing.T) {
|
|
testOpts := getDefaultOptions()
|
|
assert.Nil(t, testOpts.withClientCert)
|
|
inCert := testClientCert(t, testCaCert(t))
|
|
cert := inCert.Cert.Cert
|
|
key := inCert.Cert.Key
|
|
clientCert, err := NewClientCertificate(cert, key)
|
|
assert.NoError(t, err)
|
|
assert.NotNil(t, clientCert)
|
|
opts := getOpts(WithClientCert(clientCert))
|
|
require.NotNil(t, opts.withClientCert)
|
|
assert.Equal(t, cert, opts.withClientCert.Certificate)
|
|
assert.Equal(t, key, opts.withClientCert.CertificateKey)
|
|
})
|
|
t.Run("WithMethod_Get", func(t *testing.T) {
|
|
opts := getOpts(WithMethod(MethodGet))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withMethod = MethodGet
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithMethod_Post", func(t *testing.T) {
|
|
opts := getOpts(WithMethod(MethodPost))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withMethod = MethodPost
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithRequestBody", func(t *testing.T) {
|
|
opts := getOpts(WithRequestBody([]byte("body")))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withRequestBody = []byte("body")
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithCredentialType", func(t *testing.T) {
|
|
opts := getOpts(WithCredentialType(credential.UserPasswordType))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withCredentialType = credential.UserPasswordType
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithOverrideUsernameAttribute", func(t *testing.T) {
|
|
opts := getOpts(WithOverrideUsernameAttribute("test"))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withOverrideUsernameAttribute = "test"
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithOverridePasswordAttribute", func(t *testing.T) {
|
|
opts := getOpts(WithOverridePasswordAttribute("test"))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withOverridePasswordAttribute = "test"
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
t.Run("WithMappingOverride", func(t *testing.T) {
|
|
opts := getOpts(WithMappingOverride(unknownMapper(1)))
|
|
testOpts := getDefaultOptions()
|
|
testOpts.withMappingOverride = unknownMapper(1)
|
|
assert.Equal(t, opts, testOpts)
|
|
})
|
|
}
|