Files
threshold/internal/iam/ids_test.go
T
shadowdaoandClaude Sonnet 5.5 962d708fdd Rename Go module paths to repo.anhonesthost.net/CyberCoveLLC/threshold
Rename root, api and sdk module paths (imports, go.mod, go_package,
ldflags, build scripts, buf configs) and regenerate protobuf/gateway
code with the project's pinned toolchain. Wire identifiers unchanged.
api gets a local replace for sdk; root/api/sdk require v0.1.0.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-12 10:33:41 -07:00

53 lines
1.5 KiB
Go

// Copyright IBM Corp. 2020, 2026
// SPDX-License-Identifier: BUSL-1.1
package iam
import (
"context"
"strings"
"testing"
"repo.anhonesthost.net/CyberCoveLLC/threshold/globals"
"repo.anhonesthost.net/CyberCoveLLC/threshold/internal/errors"
"repo.anhonesthost.net/CyberCoveLLC/threshold/internal/types/scope"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
)
func Test_PublicIds(t *testing.T) {
ctx := context.Background()
t.Run("role", func(t *testing.T) {
id, err := newRoleId(ctx)
require.NoError(t, err)
assert.True(t, strings.HasPrefix(id, globals.RolePrefix+"_"))
})
t.Run("user", func(t *testing.T) {
id, err := newUserId(ctx)
require.NoError(t, err)
assert.True(t, strings.HasPrefix(id, globals.UserPrefix+"_"))
})
t.Run("group", func(t *testing.T) {
id, err := newGroupId(ctx)
require.NoError(t, err)
assert.True(t, strings.HasPrefix(id, globals.GroupPrefix+"_"))
})
t.Run("oidc managed group", func(t *testing.T) {
assert.True(t, strings.HasPrefix("mgoidc_1234567890", globals.OidcManagedGroupPrefix+"_"))
})
t.Run("scopes", func(t *testing.T) {
id, err := newScopeId(ctx, scope.Org)
require.NoError(t, err)
assert.True(t, strings.HasPrefix(id, scope.Org.Prefix()))
id, err = newScopeId(ctx, scope.Project)
require.NoError(t, err)
assert.True(t, strings.HasPrefix(id, scope.Project.Prefix()))
id, err = newScopeId(ctx, scope.Unknown)
require.Error(t, err)
assert.Empty(t, id)
assert.True(t, errors.Match(errors.T(errors.InvalidParameter), err))
})
}