mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-20 23:07:33 +00:00
8c85318fbd
* feat: return 404 or 409 if org reg disallowed * fix: system limit permissions * feat: add iam limits api * feat: disallow public org registrations on default instance * add integration test * test: integration * fix test * docs: describe public org registrations * avoid updating docs deps * fix system limits integration test * silence integration tests * fix linting * ignore strange linter complaints * review * improve reset properties naming * redefine the api * use restrictions aggregate * test query * simplify and test projection * test commands * fix unit tests * move integration test * support restrictions on default instance * also test GetRestrictions * self review * lint * abstract away resource owner * fix tests * configure supported languages * fix allowed languages * fix tests * default lang must not be restricted * preferred language must be allowed * change preferred languages * check languages everywhere * lint * test command side * lint * add integration test * add integration test * restrict supported ui locales * lint * lint * cleanup * lint * allow undefined preferred language * fix integration tests * update main * fix env var * ignore linter * ignore linter * improve integration test config * reduce cognitive complexity * compile * fix(console): switch back to saved language * feat(API): get allowed languages * fix(console): only make allowed languages selectable * warn when editing not allowed languages * check for duplicates * remove useless restriction checks * review * revert restriction renaming * fix language restrictions * lint * generate * allow custom texts for supported langs for now * fix tests * cleanup * cleanup * cleanup * lint * unsupported preferred lang is allowed * fix integration test * allow unsupported preferred languages * lint * load languages for tests * cleanup * lint * cleanup * get allowed only on admin * cleanup * reduce flakiness on very limited postgres * simplify langSvc * refactor according to suggestions in pr * lint * set first allowed language as default * selectionchange for language in msg texts * initialize login texts * init message texts * lint --------- Co-authored-by: peintnermax <max@caos.ch>
156 lines
4.9 KiB
Go
156 lines
4.9 KiB
Go
//go:build integration
|
|
|
|
package handlers_test
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"fmt"
|
|
"strconv"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
"google.golang.org/protobuf/types/known/durationpb"
|
|
"google.golang.org/protobuf/types/known/timestamppb"
|
|
|
|
"github.com/zitadel/zitadel/internal/repository/quota"
|
|
"github.com/zitadel/zitadel/pkg/grpc/admin"
|
|
quota_pb "github.com/zitadel/zitadel/pkg/grpc/quota"
|
|
"github.com/zitadel/zitadel/pkg/grpc/system"
|
|
)
|
|
|
|
func TestServer_QuotaNotification_Limit(t *testing.T) {
|
|
_, instanceID, iamOwnerCtx := Tester.UseIsolatedInstance(t, CTX, SystemCTX)
|
|
amount := 10
|
|
percent := 50
|
|
percentAmount := amount * percent / 100
|
|
|
|
_, err := Tester.Client.System.AddQuota(SystemCTX, &system.AddQuotaRequest{
|
|
InstanceId: instanceID,
|
|
Unit: quota_pb.Unit_UNIT_REQUESTS_ALL_AUTHENTICATED,
|
|
From: timestamppb.Now(),
|
|
ResetInterval: durationpb.New(time.Minute * 5),
|
|
Amount: uint64(amount),
|
|
Limit: true,
|
|
Notifications: []*quota_pb.Notification{
|
|
{
|
|
Percent: uint32(percent),
|
|
Repeat: true,
|
|
CallUrl: "http://localhost:8082",
|
|
},
|
|
{
|
|
Percent: 100,
|
|
Repeat: true,
|
|
CallUrl: "http://localhost:8082",
|
|
},
|
|
},
|
|
})
|
|
require.NoError(t, err)
|
|
|
|
for i := 0; i < percentAmount; i++ {
|
|
_, err := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
if err != nil {
|
|
require.NoError(t, fmt.Errorf("error in %d call of %d: %f", i, percentAmount, err))
|
|
}
|
|
}
|
|
awaitNotification(t, time.Now(), Tester.QuotaNotificationChan, quota.RequestsAllAuthenticated, percent)
|
|
|
|
for i := 0; i < (amount - percentAmount); i++ {
|
|
_, err := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
require.NoError(t, err)
|
|
}
|
|
awaitNotification(t, time.Now(), Tester.QuotaNotificationChan, quota.RequestsAllAuthenticated, 100)
|
|
|
|
_, limitErr := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
require.Error(t, limitErr)
|
|
}
|
|
|
|
func TestServer_QuotaNotification_NoLimit(t *testing.T) {
|
|
_, instanceID, iamOwnerCtx := Tester.UseIsolatedInstance(t, CTX, SystemCTX)
|
|
amount := 10
|
|
percent := 50
|
|
percentAmount := amount * percent / 100
|
|
|
|
_, err := Tester.Client.System.AddQuota(SystemCTX, &system.AddQuotaRequest{
|
|
InstanceId: instanceID,
|
|
Unit: quota_pb.Unit_UNIT_REQUESTS_ALL_AUTHENTICATED,
|
|
From: timestamppb.Now(),
|
|
ResetInterval: durationpb.New(time.Minute * 5),
|
|
Amount: uint64(amount),
|
|
Limit: false,
|
|
Notifications: []*quota_pb.Notification{
|
|
{
|
|
Percent: uint32(percent),
|
|
Repeat: false,
|
|
CallUrl: "http://localhost:8082",
|
|
},
|
|
{
|
|
Percent: 100,
|
|
Repeat: true,
|
|
CallUrl: "http://localhost:8082",
|
|
},
|
|
},
|
|
})
|
|
require.NoError(t, err)
|
|
|
|
for i := 0; i < percentAmount; i++ {
|
|
_, err := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
if err != nil {
|
|
require.NoError(t, fmt.Errorf("error in %d call of %d: %f", i, percentAmount, err))
|
|
}
|
|
}
|
|
awaitNotification(t, time.Now(), Tester.QuotaNotificationChan, quota.RequestsAllAuthenticated, percent)
|
|
|
|
for i := 0; i < (amount - percentAmount); i++ {
|
|
_, err := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
if err != nil {
|
|
require.NoError(t, fmt.Errorf("error in %d call of %d: %f", percentAmount+i, amount, err))
|
|
}
|
|
}
|
|
awaitNotification(t, time.Now(), Tester.QuotaNotificationChan, quota.RequestsAllAuthenticated, 100)
|
|
|
|
for i := 0; i < amount; i++ {
|
|
_, err := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
if err != nil {
|
|
require.NoError(t, fmt.Errorf("error in %d call of %d over limit: %f", i, amount, err))
|
|
}
|
|
}
|
|
awaitNotification(t, time.Now(), Tester.QuotaNotificationChan, quota.RequestsAllAuthenticated, 200)
|
|
|
|
_, limitErr := Tester.Client.Admin.GetDefaultOrg(iamOwnerCtx, &admin.GetDefaultOrgRequest{})
|
|
require.NoError(t, limitErr)
|
|
}
|
|
|
|
func awaitNotification(t *testing.T, start time.Time, bodies chan []byte, unit quota.Unit, percent int) {
|
|
for {
|
|
select {
|
|
case body := <-bodies:
|
|
plain := new(bytes.Buffer)
|
|
if err := json.Indent(plain, body, "", " "); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Log("received notificationDueEvent", plain.String())
|
|
event := struct {
|
|
Unit quota.Unit `json:"unit"`
|
|
ID string `json:"id"`
|
|
CallURL string `json:"callURL"`
|
|
PeriodStart time.Time `json:"periodStart"`
|
|
Threshold uint16 `json:"threshold"`
|
|
Usage uint64 `json:"usage"`
|
|
}{}
|
|
if err := json.Unmarshal(body, &event); err != nil {
|
|
t.Error(err)
|
|
}
|
|
if event.ID == "" {
|
|
continue
|
|
}
|
|
if event.Unit == unit && event.Threshold == uint16(percent) {
|
|
return
|
|
}
|
|
case <-time.After(20 * time.Second):
|
|
t.Fatalf("start %s stop %s timed out waiting for unit %s and percent %d", start.Format(time.RFC3339), time.Now().Format(time.RFC3339), strconv.Itoa(int(unit)), percent)
|
|
}
|
|
}
|
|
}
|