Todd Knight
5b1e4a680d
* Implement the Role CRUD API. * Implement the Role List API. * Adding Roles SDK.
99 lines
2.8 KiB
Go
99 lines
2.8 KiB
Go
package roles_test
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/hashicorp/watchtower/api"
|
|
"github.com/hashicorp/watchtower/api/roles"
|
|
"github.com/hashicorp/watchtower/api/scopes"
|
|
"github.com/hashicorp/watchtower/internal/iam"
|
|
"github.com/hashicorp/watchtower/internal/servers/controller"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestRole_Crud(t *testing.T) {
|
|
tc := controller.NewTestController(t, nil)
|
|
defer tc.Shutdown()
|
|
|
|
client := tc.Client()
|
|
org := &scopes.Organization{
|
|
Client: client,
|
|
}
|
|
|
|
checkRole := func(step string, g *roles.Role, apiErr *api.Error, err error, wantedName string) {
|
|
assert := assert.New(t)
|
|
assert.NoError(err, step)
|
|
if !assert.Nil(apiErr, step) && apiErr.Message != nil {
|
|
t.Errorf("ApiError message: %q", *apiErr.Message)
|
|
}
|
|
assert.NotNil(g, "returned no resource", step)
|
|
gotName := ""
|
|
if g.Name != nil {
|
|
gotName = *g.Name
|
|
}
|
|
assert.Equal(wantedName, gotName, step)
|
|
}
|
|
|
|
g, apiErr, err := org.CreateRole(tc.Context(), &roles.Role{Name: api.String("foo")})
|
|
checkRole("create", g, apiErr, err, "foo")
|
|
|
|
g, apiErr, err = org.ReadRole(tc.Context(), &roles.Role{Id: g.Id})
|
|
checkRole("read", g, apiErr, err, "foo")
|
|
|
|
g = &roles.Role{Id: g.Id}
|
|
g.Name = api.String("bar")
|
|
g, apiErr, err = org.UpdateRole(tc.Context(), g)
|
|
checkRole("update", g, apiErr, err, "bar")
|
|
|
|
g = &roles.Role{Id: g.Id}
|
|
g.SetDefault("name")
|
|
g, apiErr, err = org.UpdateRole(tc.Context(), g)
|
|
checkRole("update", g, apiErr, err, "")
|
|
|
|
existed, apiErr, err := org.DeleteRole(tc.Context(), g)
|
|
assert.NoError(t, err)
|
|
assert.True(t, existed, "Expected existing user when deleted, but it wasn't.")
|
|
|
|
existed, apiErr, err = org.DeleteRole(tc.Context(), g)
|
|
assert.NoError(t, err)
|
|
assert.False(t, existed, "Expected user to not exist when deleted, but it did.")
|
|
}
|
|
|
|
func TestRole_Errors(t *testing.T) {
|
|
assert := assert.New(t)
|
|
tc := controller.NewTestController(t, nil)
|
|
defer tc.Shutdown()
|
|
ctx := tc.Context()
|
|
|
|
client := tc.Client()
|
|
org := &scopes.Organization{
|
|
Client: client,
|
|
}
|
|
|
|
u, apiErr, err := org.CreateRole(ctx, &roles.Role{Name: api.String("first")})
|
|
assert.NoError(err)
|
|
assert.Nil(apiErr)
|
|
assert.NotNil(u)
|
|
|
|
// Create another resource with the same name.
|
|
_, apiErr, err = org.CreateRole(ctx, &roles.Role{Name: api.String("first")})
|
|
assert.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
|
|
_, apiErr, err = org.ReadRole(ctx, &roles.Role{Id: iam.RolePrefix + "_doesntexis"})
|
|
assert.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
assert.EqualValues(*apiErr.Status, http.StatusNotFound)
|
|
|
|
_, apiErr, err = org.ReadRole(ctx, &roles.Role{Id: "invalid id"})
|
|
assert.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
assert.EqualValues(*apiErr.Status, http.StatusBadRequest)
|
|
|
|
_, apiErr, err = org.UpdateRole(ctx, &roles.Role{Id: u.Id})
|
|
assert.NoError(err)
|
|
assert.NotNil(apiErr)
|
|
assert.EqualValues(*apiErr.Status, http.StatusBadRequest)
|
|
}
|