Sorawis Nilparuk (Bo)
50303f9c18
* bosorawis remove TestRoleGrantsForToken (#5840) * refactor auth method grants tests * refactor credential libraries grants tests * refactor hosts grants tests * refactor roles grants tests * refactor scopes grants tests * refactor tcp targets grants tests * refactor users grants tests * refactor worker grants tests * fix authmethod test broken during the refactor * remove authtoken.TestRoleGrantsForToken * add pinned ID test * correct event name * fix make gen and lint # Conflicts: # internal/daemon/controller/handlers/roles/grants_test.go # internal/daemon/controller/handlers/scopes/grants_test.go # internal/daemon/controller/handlers/targets/tcp/grants_test.go # internal/daemon/controller/handlers/workers/grants_test.go * remove one forgotten reference
49 lines
1.5 KiB
Go
49 lines
1.5 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package authtoken
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/hashicorp/boundary/internal/auth/password"
|
|
"github.com/hashicorp/boundary/internal/db"
|
|
"github.com/hashicorp/boundary/internal/iam"
|
|
"github.com/hashicorp/boundary/internal/kms"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
// TestAuthToken, despite its name, does more than just return an auth token; it
|
|
// also creates an auth method, an account, and a user and binds them together,
|
|
// then creates an auth token against it
|
|
func TestAuthToken(t testing.TB, conn *db.DB, kms *kms.Kms, scopeId string, opt ...Option) *AuthToken {
|
|
t.Helper()
|
|
|
|
opts := getOpts(opt...)
|
|
passwordOpts := password.GetOpts(opts.withPasswordOptions...)
|
|
loginName := passwordOpts.WithLoginName
|
|
if loginName == "" {
|
|
loginName = "name1"
|
|
}
|
|
|
|
authMethod := password.TestAuthMethods(t, conn, scopeId, 1)[0]
|
|
// auth account is only used to join auth method to user.
|
|
// We don't do anything else with the auth account in the test setup.
|
|
acct := password.TestAccount(t, conn, authMethod.GetPublicId(), loginName, opts.withPasswordOptions...)
|
|
|
|
ctx := context.Background()
|
|
rw := db.New(conn)
|
|
iamRepo, err := iam.NewRepository(ctx, rw, rw, kms)
|
|
require.NoError(t, err)
|
|
|
|
u := iam.TestUser(t, iamRepo, scopeId, append(opts.withIamOptions, iam.WithAccountIds(acct.PublicId))...)
|
|
|
|
repo, err := NewRepository(ctx, rw, rw, kms)
|
|
require.NoError(t, err)
|
|
|
|
at, err := repo.CreateAuthToken(ctx, u, acct.GetPublicId(), opt...)
|
|
require.NoError(t, err)
|
|
return at
|
|
}
|