zitadel/internal/query/idp_test.go
Silvan e5532238d8
test(queries): idp prepare funcs (#2650)
* chore(queries): test suite for prepare stmt funcs

* test(queries): prepare project funcs

* refactor: add comments

* test: simlify expected sql, added possibility to add args to expected queries

* test(queries): prepare funcs in org

* chore(backend): correct modules

* test(queries): org domain prepare funcs

* test: correct name

* refactor: file name

* refactor: add table to login policy columns

* chore(prepare_test): only add row to result if columns

* test(queries): login policy prepare funcs

* chore: add comments for configs

* test(queries): prepare idp funcs
2021-11-16 09:03:12 +01:00

1107 lines
35 KiB
Go

package query
import (
"database/sql"
"database/sql/driver"
"errors"
"fmt"
"regexp"
"testing"
"github.com/caos/zitadel/internal/crypto"
"github.com/caos/zitadel/internal/domain"
errs "github.com/caos/zitadel/internal/errors"
"github.com/lib/pq"
)
func Test_IDPPrepares(t *testing.T) {
type want struct {
sqlExpectations sqlExpectation
err checkErr
}
tests := []struct {
name string
prepare interface{}
want want
object interface{}
}{
{
name: "prepareIDPByIDQuery no result",
prepare: prepareIDPByIDQuery,
want: want{
sqlExpectations: mockQuery(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
nil,
nil,
),
err: func(err error) (error, bool) {
if !errs.IsNotFound(err) {
return fmt.Errorf("err should be zitadel.NotFoundError got: %w", err), false
}
return nil, true
},
},
object: (*IDP)(nil),
},
{
name: "prepareIDPByIDQuery oidc idp",
prepare: prepareIDPByIDQuery,
want: want{
sqlExpectations: mockQuery(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
// jwt config
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
},
[]driver.Value{
"idp-id",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
"idp-id",
"oidc-client-id",
nil,
"oidc-issuer",
pq.StringArray{"scope"},
domain.OIDCMappingFieldEmail,
domain.OIDCMappingFieldPreferredLoginName,
"auth.endpoint.ch",
"token.endpoint.ch",
// jwt config
nil,
nil,
nil,
nil,
nil,
},
),
},
object: &IDP{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
OIDCIDP: &OIDCIDP{
IDPID: "idp-id",
ClientID: "oidc-client-id",
ClientSecret: &crypto.CryptoValue{},
Issuer: "oidc-issuer",
Scopes: []string{"scope"},
DisplayNameMapping: domain.OIDCMappingFieldEmail,
UsernameMapping: domain.OIDCMappingFieldPreferredLoginName,
AuthorizationEndpoint: "auth.endpoint.ch",
TokenEndpoint: "token.endpoint.ch",
},
},
},
{
name: "prepareIDPByIDQuery jwt config",
prepare: prepareIDPByIDQuery,
want: want{
sqlExpectations: mockQuery(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
// jwt config
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
},
[]driver.Value{
"idp-id",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
// jwt config
"idp-id",
"jwt-issuer",
"key.ch",
"x-header-name",
"jwt.endpoint.ch",
},
),
},
object: &IDP{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
JWTIDP: &JWTIDP{
IDPID: "idp-id",
Issuer: "jwt-issuer",
KeysEndpoint: "key.ch",
HeaderName: "x-header-name",
Endpoint: "jwt.endpoint.ch",
},
},
},
{
name: "prepareIDPByIDQuery no config",
prepare: prepareIDPByIDQuery,
want: want{
sqlExpectations: mockQuery(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
// jwt config
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
},
[]driver.Value{
"idp-id",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
// jwt config
nil,
nil,
nil,
nil,
nil,
},
),
},
object: &IDP{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
},
},
{
name: "prepareIDPByIDQuery sql err",
prepare: prepareIDPByIDQuery,
want: want{
sqlExpectations: mockQueryErr(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
sql.ErrConnDone,
),
err: func(err error) (error, bool) {
if !errors.Is(err, sql.ErrConnDone) {
return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
}
return nil, true
},
},
object: nil,
},
{
name: "prepareIDPsQuery no result",
prepare: prepareIDPsQuery,
want: want{
sqlExpectations: mockQueries(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint,`+
` COUNT(*) OVER ()`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
nil,
nil,
),
err: func(err error) (error, bool) {
if !errs.IsNotFound(err) {
return fmt.Errorf("err should be zitadel.NotFoundError got: %w", err), false
}
return nil, true
},
},
object: &IDPs{IDPs: []*IDP{}},
},
{
name: "prepareIDPsQuery oidc idp",
prepare: prepareIDPsQuery,
want: want{
sqlExpectations: mockQueries(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint,`+
` COUNT(*) OVER ()`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
// jwt config
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
"count",
},
[][]driver.Value{
{
"idp-id",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
"idp-id",
"oidc-client-id",
nil,
"oidc-issuer",
pq.StringArray{"scope"},
domain.OIDCMappingFieldEmail,
domain.OIDCMappingFieldPreferredLoginName,
"auth.endpoint.ch",
"token.endpoint.ch",
// jwt config
nil,
nil,
nil,
nil,
nil,
},
},
),
},
object: &IDPs{
SearchResponse: SearchResponse{
Count: 1,
},
IDPs: []*IDP{
{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
OIDCIDP: &OIDCIDP{
IDPID: "idp-id",
ClientID: "oidc-client-id",
ClientSecret: &crypto.CryptoValue{},
Issuer: "oidc-issuer",
Scopes: []string{"scope"},
DisplayNameMapping: domain.OIDCMappingFieldEmail,
UsernameMapping: domain.OIDCMappingFieldPreferredLoginName,
AuthorizationEndpoint: "auth.endpoint.ch",
TokenEndpoint: "token.endpoint.ch",
},
},
},
},
},
{
name: "prepareIDPsQuery jwt config",
prepare: prepareIDPsQuery,
want: want{
sqlExpectations: mockQueries(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint,`+
` COUNT(*) OVER ()`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
"count",
},
[][]driver.Value{
{
"idp-id",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
// jwt config
"idp-id",
"jwt-issuer",
"key.ch",
"x-header-name",
"jwt.endpoint.ch",
},
},
),
},
object: &IDPs{
SearchResponse: SearchResponse{
Count: 1,
},
IDPs: []*IDP{
{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
JWTIDP: &JWTIDP{
IDPID: "idp-id",
Issuer: "jwt-issuer",
KeysEndpoint: "key.ch",
HeaderName: "x-header-name",
Endpoint: "jwt.endpoint.ch",
},
},
},
},
},
{
name: "prepareIDPsQuery no config",
prepare: prepareIDPsQuery,
want: want{
sqlExpectations: mockQueries(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint,`+
` COUNT(*) OVER ()`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
"count",
},
[][]driver.Value{
{
"idp-id",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
// jwt config
nil,
nil,
nil,
nil,
nil,
},
},
),
},
object: &IDPs{
SearchResponse: SearchResponse{
Count: 1,
},
IDPs: []*IDP{
{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
},
},
},
},
{
name: "prepareIDPsQuery all config types",
prepare: prepareIDPsQuery,
want: want{
sqlExpectations: mockQueries(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint,`+
` COUNT(*) OVER ()`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
[]string{
"id",
"resource_owner",
"creation_date",
"change_date",
"sequence",
"state",
"name",
"styling_type",
"owner_type",
"auto_register",
// oidc config
"idp_id",
"client_id",
"client_secret",
"issuer",
"scopes",
"display_name_mapping",
"username_mapping",
"authorization_endpoint",
"token_endpoint",
"idp_id",
"issuer",
"keys_endpoint",
"header_name",
"endpoint",
"count",
},
[][]driver.Value{
{
"idp-id-1",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
// jwt config
nil,
nil,
nil,
nil,
nil,
},
{
"idp-id-2",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
"idp-id",
"oidc-client-id",
nil,
"oidc-issuer",
pq.StringArray{"scope"},
domain.OIDCMappingFieldEmail,
domain.OIDCMappingFieldPreferredLoginName,
"auth.endpoint.ch",
"token.endpoint.ch",
// jwt config
nil,
nil,
nil,
nil,
nil,
},
{
"idp-id-3",
"ro",
testNow,
testNow,
uint64(20211109),
domain.IDPConfigStateActive,
"idp-name",
domain.IDPConfigStylingTypeGoogle,
domain.IdentityProviderTypeOrg,
true,
// oidc config
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
nil,
// jwt config
"idp-id",
"jwt-issuer",
"key.ch",
"x-header-name",
"jwt.endpoint.ch",
},
},
),
},
object: &IDPs{
SearchResponse: SearchResponse{
Count: 3,
},
IDPs: []*IDP{
{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id-1",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
},
{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id-2",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
OIDCIDP: &OIDCIDP{
IDPID: "idp-id",
ClientID: "oidc-client-id",
ClientSecret: &crypto.CryptoValue{},
Issuer: "oidc-issuer",
Scopes: []string{"scope"},
DisplayNameMapping: domain.OIDCMappingFieldEmail,
UsernameMapping: domain.OIDCMappingFieldPreferredLoginName,
AuthorizationEndpoint: "auth.endpoint.ch",
TokenEndpoint: "token.endpoint.ch",
},
},
{
CreationDate: testNow,
ChangeDate: testNow,
Sequence: 20211109,
ResourceOwner: "ro",
ID: "idp-id-3",
State: domain.IDPConfigStateActive,
Name: "idp-name",
StylingType: domain.IDPConfigStylingTypeGoogle,
OwnerType: domain.IdentityProviderTypeOrg,
AutoRegister: true,
JWTIDP: &JWTIDP{
IDPID: "idp-id",
Issuer: "jwt-issuer",
KeysEndpoint: "key.ch",
HeaderName: "x-header-name",
Endpoint: "jwt.endpoint.ch",
},
},
},
},
},
{
name: "prepareIDPsQuery sql err",
prepare: prepareIDPsQuery,
want: want{
sqlExpectations: mockQueryErr(
regexp.QuoteMeta(`SELECT zitadel.projections.idps.id,`+
` zitadel.projections.idps.resource_owner,`+
` zitadel.projections.idps.creation_date,`+
` zitadel.projections.idps.change_date,`+
` zitadel.projections.idps.sequence,`+
` zitadel.projections.idps.state,`+
` zitadel.projections.idps.name,`+
` zitadel.projections.idps.styling_type,`+
` zitadel.projections.idps.owner_type,`+
` zitadel.projections.idps.auto_register,`+
` zitadel.projections.idps_oidc_config.idp_id,`+
` zitadel.projections.idps_oidc_config.client_id,`+
` zitadel.projections.idps_oidc_config.client_secret,`+
` zitadel.projections.idps_oidc_config.issuer,`+
` zitadel.projections.idps_oidc_config.scopes,`+
` zitadel.projections.idps_oidc_config.display_name_mapping,`+
` zitadel.projections.idps_oidc_config.username_mapping,`+
` zitadel.projections.idps_oidc_config.authorization_endpoint,`+
` zitadel.projections.idps_oidc_config.token_endpoint,`+
` zitadel.projections.idps_jwt_config.idp_id,`+
` zitadel.projections.idps_jwt_config.issuer,`+
` zitadel.projections.idps_jwt_config.keys_endpoint,`+
` zitadel.projections.idps_jwt_config.header_name,`+
` zitadel.projections.idps_jwt_config.endpoint,`+
` COUNT(*) OVER ()`+
` FROM zitadel.projections.idps`+
` LEFT JOIN zitadel.projections.idps_oidc_config ON zitadel.projections.idps.id = zitadel.projections.idps_oidc_config.idp_id`+
` LEFT JOIN zitadel.projections.idps_jwt_config ON zitadel.projections.idps.id = zitadel.projections.idps_jwt_config.idp_id`),
sql.ErrConnDone,
),
err: func(err error) (error, bool) {
if !errors.Is(err, sql.ErrConnDone) {
return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
}
return nil, true
},
},
object: nil,
},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
assertPrepare(t, tt.prepare, tt.object, tt.want.sqlExpectations, tt.want.err)
})
}
}