mirror of
https://github.com/zitadel/zitadel.git
synced 2025-08-11 21:17:32 +00:00
feat: add personal access tokens for service users (#2974)
* feat: add machine tokens * fix test * rename to pat * fix merge and tests * fix scopes * fix migration version * fix test * Update internal/repository/user/personal_access_token.go Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com> Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
This commit is contained in:
Livio Amstutz
271
internal/query/user_personal_access_token_test.go
Normal file
271
internal/query/user_personal_access_token_test.go
Normal file
@@ -0,0 +1,271 @@
|
||||
package query
|
||||
|
||||
import (
|
||||
"database/sql"
|
||||
"database/sql/driver"
|
||||
"errors"
|
||||
"fmt"
|
||||
"regexp"
|
||||
"testing"
|
||||
"time"
|
||||
|
||||
"github.com/lib/pq"
|
||||
|
||||
errs "github.com/caos/zitadel/internal/errors"
|
||||
)
|
||||
|
||||
var (
|
||||
personalAccessTokenStmt = regexp.QuoteMeta(
|
||||
"SELECT zitadel.projections.personal_access_tokens.id," +
|
||||
" zitadel.projections.personal_access_tokens.creation_date," +
|
||||
" zitadel.projections.personal_access_tokens.change_date," +
|
||||
" zitadel.projections.personal_access_tokens.resource_owner," +
|
||||
" zitadel.projections.personal_access_tokens.sequence," +
|
||||
" zitadel.projections.personal_access_tokens.user_id," +
|
||||
" zitadel.projections.personal_access_tokens.expiration," +
|
||||
" zitadel.projections.personal_access_tokens.scopes" +
|
||||
" FROM zitadel.projections.personal_access_tokens")
|
||||
personalAccessTokenCols = []string{
|
||||
"id",
|
||||
"creation_date",
|
||||
"change_date",
|
||||
"resource_owner",
|
||||
"sequence",
|
||||
"user_id",
|
||||
"expiration",
|
||||
"scopes",
|
||||
}
|
||||
personalAccessTokensStmt = regexp.QuoteMeta(
|
||||
"SELECT zitadel.projections.personal_access_tokens.id," +
|
||||
" zitadel.projections.personal_access_tokens.creation_date," +
|
||||
" zitadel.projections.personal_access_tokens.change_date," +
|
||||
" zitadel.projections.personal_access_tokens.resource_owner," +
|
||||
" zitadel.projections.personal_access_tokens.sequence," +
|
||||
" zitadel.projections.personal_access_tokens.user_id," +
|
||||
" zitadel.projections.personal_access_tokens.expiration," +
|
||||
" zitadel.projections.personal_access_tokens.scopes," +
|
||||
" COUNT(*) OVER ()" +
|
||||
" FROM zitadel.projections.personal_access_tokens")
|
||||
personalAccessTokensCols = []string{
|
||||
"id",
|
||||
"creation_date",
|
||||
"change_date",
|
||||
"resource_owner",
|
||||
"sequence",
|
||||
"user_id",
|
||||
"expiration",
|
||||
"scopes",
|
||||
"count",
|
||||
}
|
||||
)
|
||||
|
||||
func Test_PersonalAccessTokenPrepares(t *testing.T) {
|
||||
type want struct {
|
||||
sqlExpectations sqlExpectation
|
||||
err checkErr
|
||||
}
|
||||
tests := []struct {
|
||||
name string
|
||||
prepare interface{}
|
||||
want want
|
||||
object interface{}
|
||||
}{
|
||||
{
|
||||
name: "preparePersonalAccessTokenQuery no result",
|
||||
prepare: preparePersonalAccessTokenQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQuery(
|
||||
personalAccessTokenStmt,
|
||||
nil,
|
||||
nil,
|
||||
),
|
||||
err: func(err error) (error, bool) {
|
||||
if !errs.IsNotFound(err) {
|
||||
return fmt.Errorf("err should be zitadel.NotFoundError got: %w", err), false
|
||||
}
|
||||
return nil, true
|
||||
},
|
||||
},
|
||||
object: (*PersonalAccessToken)(nil),
|
||||
},
|
||||
{
|
||||
name: "preparePersonalAccessTokenQuery found",
|
||||
prepare: preparePersonalAccessTokenQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQuery(
|
||||
personalAccessTokenStmt,
|
||||
personalAccessTokenCols,
|
||||
[]driver.Value{
|
||||
"token-id",
|
||||
testNow,
|
||||
testNow,
|
||||
"ro",
|
||||
uint64(20211202),
|
||||
"user-id",
|
||||
time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
pq.StringArray{"openid"},
|
||||
},
|
||||
),
|
||||
},
|
||||
object: &PersonalAccessToken{
|
||||
ID: "token-id",
|
||||
CreationDate: testNow,
|
||||
ChangeDate: testNow,
|
||||
ResourceOwner: "ro",
|
||||
Sequence: 20211202,
|
||||
UserID: "user-id",
|
||||
Expiration: time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
Scopes: []string{"openid"},
|
||||
},
|
||||
},
|
||||
{
|
||||
name: "preparePersonalAccessTokenQuery sql err",
|
||||
prepare: preparePersonalAccessTokenQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQueryErr(
|
||||
personalAccessTokenStmt,
|
||||
sql.ErrConnDone,
|
||||
),
|
||||
err: func(err error) (error, bool) {
|
||||
if !errors.Is(err, sql.ErrConnDone) {
|
||||
return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
|
||||
}
|
||||
return nil, true
|
||||
},
|
||||
},
|
||||
object: nil,
|
||||
},
|
||||
{
|
||||
name: "preparePersonalAccessTokensQuery no result",
|
||||
prepare: preparePersonalAccessTokensQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQueries(
|
||||
personalAccessTokensStmt,
|
||||
nil,
|
||||
nil,
|
||||
),
|
||||
},
|
||||
object: &PersonalAccessTokens{PersonalAccessTokens: []*PersonalAccessToken{}},
|
||||
},
|
||||
{
|
||||
name: "preparePersonalAccessTokensQuery one token",
|
||||
prepare: preparePersonalAccessTokensQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQueries(
|
||||
personalAccessTokensStmt,
|
||||
personalAccessTokensCols,
|
||||
[][]driver.Value{
|
||||
{
|
||||
"token-id",
|
||||
testNow,
|
||||
testNow,
|
||||
"ro",
|
||||
uint64(20211202),
|
||||
"user-id",
|
||||
time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
pq.StringArray{"openid"},
|
||||
},
|
||||
},
|
||||
),
|
||||
},
|
||||
object: &PersonalAccessTokens{
|
||||
SearchResponse: SearchResponse{
|
||||
Count: 1,
|
||||
},
|
||||
PersonalAccessTokens: []*PersonalAccessToken{
|
||||
{
|
||||
ID: "token-id",
|
||||
CreationDate: testNow,
|
||||
ChangeDate: testNow,
|
||||
ResourceOwner: "ro",
|
||||
Sequence: 20211202,
|
||||
UserID: "user-id",
|
||||
Expiration: time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
Scopes: []string{"openid"},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
{
|
||||
name: "preparePersonalAccessTokensQuery multiple tokens",
|
||||
prepare: preparePersonalAccessTokensQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQueries(
|
||||
personalAccessTokensStmt,
|
||||
personalAccessTokensCols,
|
||||
[][]driver.Value{
|
||||
{
|
||||
"token-id",
|
||||
testNow,
|
||||
testNow,
|
||||
"ro",
|
||||
uint64(20211202),
|
||||
"user-id",
|
||||
time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
pq.StringArray{"openid"},
|
||||
},
|
||||
{
|
||||
"token-id2",
|
||||
testNow,
|
||||
testNow,
|
||||
"ro",
|
||||
uint64(20211202),
|
||||
"user-id",
|
||||
time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
pq.StringArray{"openid"},
|
||||
},
|
||||
},
|
||||
),
|
||||
},
|
||||
object: &PersonalAccessTokens{
|
||||
SearchResponse: SearchResponse{
|
||||
Count: 2,
|
||||
},
|
||||
PersonalAccessTokens: []*PersonalAccessToken{
|
||||
{
|
||||
ID: "token-id",
|
||||
CreationDate: testNow,
|
||||
ChangeDate: testNow,
|
||||
ResourceOwner: "ro",
|
||||
Sequence: 20211202,
|
||||
UserID: "user-id",
|
||||
Expiration: time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
Scopes: []string{"openid"},
|
||||
},
|
||||
{
|
||||
ID: "token-id2",
|
||||
CreationDate: testNow,
|
||||
ChangeDate: testNow,
|
||||
ResourceOwner: "ro",
|
||||
Sequence: 20211202,
|
||||
UserID: "user-id",
|
||||
Expiration: time.Date(9999, 12, 31, 23, 59, 59, 0, time.UTC),
|
||||
Scopes: []string{"openid"},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
{
|
||||
name: "preparePersonalAccessTokensQuery sql err",
|
||||
prepare: preparePersonalAccessTokensQuery,
|
||||
want: want{
|
||||
sqlExpectations: mockQueryErr(
|
||||
personalAccessTokensStmt,
|
||||
sql.ErrConnDone,
|
||||
),
|
||||
err: func(err error) (error, bool) {
|
||||
if !errors.Is(err, sql.ErrConnDone) {
|
||||
return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
|
||||
}
|
||||
return nil, true
|
||||
},
|
||||
},
|
||||
object: nil,
|
||||
},
|
||||
}
|
||||
for _, tt := range tests {
|
||||
t.Run(tt.name, func(t *testing.T) {
|
||||
assertPrepare(t, tt.prepare, tt.object, tt.want.sqlExpectations, tt.want.err)
|
||||
})
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user