143 lines
4.7 KiB
Bash
143 lines
4.7 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load _auth
|
|
load _helpers
|
|
load _credential_stores
|
|
load _credentials
|
|
|
|
export NEW_STORE='credentials-test-store'
|
|
export NEW_CREDENTIAL='test-up'
|
|
export NEW_JSON_CREDENTIAL='test-json'
|
|
|
|
@test "boundary/login: can login as default user" {
|
|
run login $DEFAULT_LOGIN
|
|
echo "$output"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credential-stores: can create $NEW_STORE static store in default project" {
|
|
run create_static_credential_store $NEW_STORE $DEFAULT_P_ID
|
|
echo "$output"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can create $NEW_CREDENTIAL credential in $NEW_STORE store" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
run create_username_password_credential $NEW_CREDENTIAL $csid 'username' 'password'
|
|
echo "$output"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can create $NEW_JSON_CREDENTIAL credential in $NEW_STORE store" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
run create_json_credential $NEW_JSON_CREDENTIAL $csid '-string-kv username=admin -string-kv password=pass'
|
|
echo "$output"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can not create already created $NEW_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
run create_username_password_credential $NEW_CREDENTIAL $csid 'username' 'password'
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can not create already created $NEW_JSON_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
run create_json_credential $NEW_JSON_CREDENTIAL $csid '-string-kv username=admin -string-kv password=pass'
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can read $NEW_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
local cid=$(credential_id $NEW_CREDENTIAL $csid)
|
|
run read_credential $cid
|
|
echo "$output"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can read $NEW_JSON_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
local cid=$(credential_id $NEW_JSON_CREDENTIAL $csid)
|
|
run read_credential $cid
|
|
echo "$output"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can delete $NEW_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
local cid=$(credential_id $NEW_CREDENTIAL $csid)
|
|
run delete_credential $cid
|
|
echo "$output"
|
|
run has_status_code "$output" "204"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can delete $NEW_JSON_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
local cid=$(credential_id $NEW_JSON_CREDENTIAL $csid)
|
|
run delete_credential $cid
|
|
echo "$output"
|
|
run has_status_code "$output" "204"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credentials: can not use object flag with kv flags for json credential" {
|
|
echo "{\"key\":\"value\"}" > cred_json_object
|
|
local object_file_path="file://$(pwd)/cred_json_object"
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
|
|
local name='object & kv flag test'
|
|
run create_json_credential $name $csid "-object $object_file_path -kv password=pass"
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
|
|
local name='object & bool-kv flag test'
|
|
run create_json_credential $name $csid "-object $object_file_path -bool-kv password=true"
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
|
|
local name='object & num-kv flag test'
|
|
run create_json_credential $name $csid "-object $object_file_path -num-kv password=1234"
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
|
|
local name='object & string-kv flag test'
|
|
run create_json_credential $name $csid "-object $object_file_path -string-kv password=pass"
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
|
|
rm cred_json_object
|
|
}
|
|
|
|
@test "boundary/credential-stores: can not read deleted $NEW_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
local cid=$(credential_id $NEW_CREDENTIAL $csid)
|
|
run read_credential $cid
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
}
|
|
|
|
@test "boundary/credential-stores: can delete $NEW_STORE static store" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
run delete_credential_store $csid
|
|
echo "$output"
|
|
run has_status_code "$output" "204"
|
|
[ "$status" -eq 0 ]
|
|
}
|
|
|
|
@test "boundary/credential-stores: can not read deleted $NEW_STORE static store" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
run read_credential_store $csid
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
}
|
|
|
|
@test "boundary/credential-stores: can not read deleted $NEW_JSON_CREDENTIAL credential" {
|
|
local csid=$(credential_store_id $NEW_STORE $DEFAULT_P_ID)
|
|
local cid=$(credential_id $NEW_JSON_CREDENTIAL $csid)
|
|
run read_credential $cid
|
|
echo "$output"
|
|
[ "$status" -eq 1 ]
|
|
} |