zitadel/internal/api/grpc/instance/v2beta/integration_test/instance_test.go

//go:build integration

package instance_test

import (
	"context"
	"fmt"
	"testing"
	"time"

	"github.com/muhlemmer/gu"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
	"google.golang.org/grpc/codes"
	"google.golang.org/grpc/status"

	"github.com/zitadel/zitadel/internal/integration"
	"github.com/zitadel/zitadel/pkg/grpc/feature/v2"
	instance "github.com/zitadel/zitadel/pkg/grpc/instance/v2beta"
)

func TestDeleteInstace(t *testing.T) {
	t.Parallel()

	// Given
	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Minute)
	defer cancel()

	ctxWithSysAuthZ := integration.WithSystemAuthorization(ctx)

	instEventStore := integration.NewInstance(ctxWithSysAuthZ)

	instRelational := integration.NewInstance(ctxWithSysAuthZ)
	integration.EnsureInstanceFeature(t, ctxWithSysAuthZ, instRelational, &feature.SetInstanceFeaturesRequest{EnableRelationalTables: gu.Ptr(true)}, func(tCollect *assert.CollectT, got *feature.GetInstanceFeaturesResponse) {
		assert.True(tCollect, got.EnableRelationalTables.GetEnabled())
	})

	instances := []*integration.Instance{
		instEventStore,
		instRelational,
	}
	t.Cleanup(func() {
		instRelational.Client.InstanceV2Beta.DeleteInstance(ctxWithSysAuthZ, &instance.DeleteInstanceRequest{InstanceId: instRelational.ID()})
		instEventStore.Client.InstanceV2Beta.DeleteInstance(ctxWithSysAuthZ, &instance.DeleteInstanceRequest{InstanceId: instEventStore.ID()})
	})

	for _, inst := range instances {
		tt := []struct {
			testName           string
			inputRequest       *instance.DeleteInstanceRequest
			inputContext       context.Context
			expectedErrorMsg   string
			expectedErrorCode  codes.Code
			expectedInstanceID string
		}{
			{
				testName: "when invalid context should return unauthN error",
				inputRequest: &instance.DeleteInstanceRequest{
					InstanceId: " ",
				},
				inputContext:      context.Background(),
				expectedErrorCode: codes.Unauthenticated,
				expectedErrorMsg:  "auth header missing",
			},
			{
				testName: "when invalid input should return invalid argument error",
				inputRequest: &instance.DeleteInstanceRequest{
					InstanceId: inst.ID() + "invalid",
				},
				inputContext:      ctxWithSysAuthZ,
				expectedErrorCode: codes.NotFound,
				expectedErrorMsg:  "not found",
			},
			{
				testName: "when delete succeeds should return deletion date",
				inputRequest: &instance.DeleteInstanceRequest{
					InstanceId: inst.ID(),
				},
				inputContext:       ctxWithSysAuthZ,
				expectedInstanceID: inst.ID(),
			},
		}
		for _, tc := range tt {
			t.Run(tc.testName, func(t *testing.T) {
				// Test
				res, err := inst.Client.InstanceV2Beta.DeleteInstance(tc.inputContext, tc.inputRequest)

				// Verify
				assert.Equal(t, tc.expectedErrorCode, status.Code(err))
				assert.Contains(t, status.Convert(err).Message(), tc.expectedErrorMsg)
				if tc.expectedErrorMsg == "" {
					require.NotNil(t, res)
					require.NotEmpty(t, res.GetDeletionDate())
				}
			})
		}
	}
}

func TestUpdateInstace(t *testing.T) {
	t.Parallel()

	// Given
	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Minute)
	defer cancel()

	ctxWithSysAuthZ := integration.WithSystemAuthorization(ctx)

	instEventStore := integration.NewInstance(ctxWithSysAuthZ)
	orgOwnerESCtx := instEventStore.WithAuthorizationToken(context.Background(), integration.UserTypeOrgOwner)

	instRelational := integration.NewInstance(ctxWithSysAuthZ)
	integration.EnsureInstanceFeature(t, ctxWithSysAuthZ, instRelational, &feature.SetInstanceFeaturesRequest{EnableRelationalTables: gu.Ptr(true)}, func(tCollect *assert.CollectT, got *feature.GetInstanceFeaturesResponse) {
		assert.True(tCollect, got.EnableRelationalTables.GetEnabled())
	})
	orgOwnerRelationalCtx := instRelational.WithAuthorizationToken(context.Background(), integration.UserTypeOrgOwner)

	instances := []struct {
		instance *integration.Instance
		ctx      context.Context
	}{
		{instance: instEventStore, ctx: orgOwnerESCtx},
		{instance: instRelational, ctx: orgOwnerRelationalCtx},
	}

	t.Cleanup(func() {
		instEventStore.Client.InstanceV2Beta.DeleteInstance(ctxWithSysAuthZ, &instance.DeleteInstanceRequest{InstanceId: instEventStore.ID()})
		instRelational.Client.InstanceV2Beta.DeleteInstance(ctxWithSysAuthZ, &instance.DeleteInstanceRequest{InstanceId: instRelational.ID()})
	})

	for i, inst := range instances {
		tt := []struct {
			testName          string
			inputRequest      *instance.UpdateInstanceRequest
			inputContext      context.Context
			expectedErrorMsg  string
			expectedErrorCode codes.Code
			expectedNewName   string
		}{
			{
				testName: "when invalid context should return unauthN error",
				inputRequest: &instance.UpdateInstanceRequest{
					InstanceId:   inst.instance.ID(),
					InstanceName: " ",
				},
				inputContext:      context.Background(),
				expectedErrorCode: codes.Unauthenticated,
				expectedErrorMsg:  "auth header missing",
			},
			{
				testName: "when unauthZ context should return unauthZ error",
				inputRequest: &instance.UpdateInstanceRequest{
					InstanceId:   inst.instance.ID(),
					InstanceName: " ",
				},
				inputContext:      inst.ctx,
				expectedErrorCode: codes.PermissionDenied,
				expectedErrorMsg:  "No matching permissions found (AUTH-5mWD2)",
			},
			{
				testName: "when update succeeds should change instance name",
				inputRequest: &instance.UpdateInstanceRequest{
					InstanceId:   inst.instance.ID(),
					InstanceName: fmt.Sprintf("an-updated-name %d", i),
				},
				inputContext:    ctxWithSysAuthZ,
				expectedNewName: fmt.Sprintf("an-updated-name %d", i),
			},
		}

		for _, tc := range tt {
			t.Run(tc.testName, func(t *testing.T) {
				// Test
				res, err := inst.instance.Client.InstanceV2Beta.UpdateInstance(tc.inputContext, tc.inputRequest)

				// Verify
				assert.Equal(t, tc.expectedErrorCode, status.Code(err))
				assert.Equal(t, tc.expectedErrorMsg, status.Convert(err).Message())
				if tc.expectedErrorMsg == "" {

					require.NotNil(t, res)
					assert.NotEmpty(t, res.GetChangeDate())

					retryDuration, tick := integration.WaitForAndTickWithMaxDuration(tc.inputContext, time.Minute)
					require.EventuallyWithT(t, func(tt *assert.CollectT) {
						retrievedInstance, err := inst.instance.Client.InstanceV2Beta.GetInstance(tc.inputContext, &instance.GetInstanceRequest{InstanceId: inst.instance.ID()})
						require.Nil(tt, err)
						assert.Equal(tt, tc.expectedNewName, retrievedInstance.GetInstance().GetName())
					}, retryDuration, tick, "timeout waiting for expected execution result")
				}
			})
		}

	}
}