mirror of
https://github.com/zitadel/zitadel
synced 2024-11-23 19:19:19 +00:00
3473156c7e
* fix: move queries to query package * fix(auth): switch project role requests to query pkg * refactor: delete unused project role code * remove repo * implement sql queries * fix(database): oidc config change type to int2 * fix(queries): implement app queries * refactor: simplify code * fix: correct app query * Update app.go * fix token check * fix mock * test: app prepares * test: oidc compliance * test: OIDCOriginAllowList * fix: converter * resolve unsupported oidc version Co-authored-by: Livio Amstutz <livio.a@gmail.com>
384 lines
11 KiB
Go
384 lines
11 KiB
Go
package query
|
|
|
|
import (
|
|
"database/sql"
|
|
"database/sql/driver"
|
|
"errors"
|
|
"fmt"
|
|
"regexp"
|
|
"testing"
|
|
|
|
"github.com/caos/zitadel/internal/domain"
|
|
errs "github.com/caos/zitadel/internal/errors"
|
|
)
|
|
|
|
var (
|
|
projectCols = []string{
|
|
"id",
|
|
"creation_date",
|
|
"change_date",
|
|
"resource_owner",
|
|
"state",
|
|
"sequence",
|
|
"name",
|
|
"project_role_assertion",
|
|
"project_role_check",
|
|
"has_project_check",
|
|
"private_labeling_setting",
|
|
}
|
|
)
|
|
|
|
func Test_ProjectPrepares(t *testing.T) {
|
|
type want struct {
|
|
sqlExpectations sqlExpectation
|
|
err checkErr
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
prepare interface{}
|
|
want want
|
|
object interface{}
|
|
}{
|
|
{
|
|
name: "prepareProjectsQuery no result",
|
|
prepare: prepareProjectsQuery,
|
|
want: want{
|
|
sqlExpectations: mockQueries(
|
|
regexp.QuoteMeta(`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting,`+
|
|
` COUNT(*) OVER ()`+
|
|
` FROM zitadel.projections.projects`),
|
|
nil,
|
|
nil,
|
|
),
|
|
},
|
|
object: &Projects{Projects: []*Project{}},
|
|
},
|
|
{
|
|
name: "prepareProjectsQuery one result",
|
|
prepare: prepareProjectsQuery,
|
|
want: want{
|
|
sqlExpectations: mockQueries(
|
|
regexp.QuoteMeta(`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting,`+
|
|
` COUNT(*) OVER ()`+
|
|
` FROM zitadel.projections.projects`),
|
|
[]string{
|
|
"id",
|
|
"creation_date",
|
|
"change_date",
|
|
"resource_owner",
|
|
"state",
|
|
"sequence",
|
|
"name",
|
|
"project_role_assertion",
|
|
"project_role_check",
|
|
"has_project_check",
|
|
"private_labeling_setting",
|
|
"count",
|
|
},
|
|
[][]driver.Value{
|
|
{
|
|
"id",
|
|
testNow,
|
|
testNow,
|
|
"ro",
|
|
domain.ProjectStateActive,
|
|
uint64(20211108),
|
|
"project-name",
|
|
true,
|
|
true,
|
|
true,
|
|
domain.PrivateLabelingSettingEnforceProjectResourceOwnerPolicy,
|
|
},
|
|
},
|
|
),
|
|
},
|
|
object: &Projects{
|
|
SearchResponse: SearchResponse{
|
|
Count: 1,
|
|
},
|
|
Projects: []*Project{
|
|
{
|
|
ID: "id",
|
|
CreationDate: testNow,
|
|
ChangeDate: testNow,
|
|
ResourceOwner: "ro",
|
|
State: domain.ProjectStateActive,
|
|
Sequence: 20211108,
|
|
Name: "project-name",
|
|
ProjectRoleAssertion: true,
|
|
ProjectRoleCheck: true,
|
|
HasProjectCheck: true,
|
|
PrivateLabelingSetting: domain.PrivateLabelingSettingEnforceProjectResourceOwnerPolicy,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "prepareProjectsQuery multiple result",
|
|
prepare: prepareProjectsQuery,
|
|
want: want{
|
|
sqlExpectations: mockQueries(
|
|
regexp.QuoteMeta(`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting,`+
|
|
` COUNT(*) OVER ()`+
|
|
` FROM zitadel.projections.projects`),
|
|
[]string{
|
|
"id",
|
|
"creation_date",
|
|
"change_date",
|
|
"resource_owner",
|
|
"state",
|
|
"sequence",
|
|
"name",
|
|
"project_role_assertion",
|
|
"project_role_check",
|
|
"has_project_check",
|
|
"private_labeling_setting",
|
|
"count",
|
|
},
|
|
[][]driver.Value{
|
|
{
|
|
"id-1",
|
|
testNow,
|
|
testNow,
|
|
"ro",
|
|
domain.ProjectStateActive,
|
|
uint64(20211108),
|
|
"project-name-1",
|
|
true,
|
|
true,
|
|
true,
|
|
domain.PrivateLabelingSettingEnforceProjectResourceOwnerPolicy,
|
|
},
|
|
{
|
|
"id-2",
|
|
testNow,
|
|
testNow,
|
|
"ro",
|
|
domain.ProjectStateActive,
|
|
uint64(20211108),
|
|
"project-name-2",
|
|
false,
|
|
false,
|
|
false,
|
|
domain.PrivateLabelingSettingAllowLoginUserResourceOwnerPolicy,
|
|
},
|
|
},
|
|
),
|
|
},
|
|
object: &Projects{
|
|
SearchResponse: SearchResponse{
|
|
Count: 2,
|
|
},
|
|
Projects: []*Project{
|
|
{
|
|
ID: "id-1",
|
|
CreationDate: testNow,
|
|
ChangeDate: testNow,
|
|
ResourceOwner: "ro",
|
|
State: domain.ProjectStateActive,
|
|
Sequence: 20211108,
|
|
Name: "project-name-1",
|
|
ProjectRoleAssertion: true,
|
|
ProjectRoleCheck: true,
|
|
HasProjectCheck: true,
|
|
PrivateLabelingSetting: domain.PrivateLabelingSettingEnforceProjectResourceOwnerPolicy,
|
|
},
|
|
{
|
|
ID: "id-2",
|
|
CreationDate: testNow,
|
|
ChangeDate: testNow,
|
|
ResourceOwner: "ro",
|
|
State: domain.ProjectStateActive,
|
|
Sequence: 20211108,
|
|
Name: "project-name-2",
|
|
ProjectRoleAssertion: false,
|
|
ProjectRoleCheck: false,
|
|
HasProjectCheck: false,
|
|
PrivateLabelingSetting: domain.PrivateLabelingSettingAllowLoginUserResourceOwnerPolicy,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "prepareProjectsQuery sql err",
|
|
prepare: prepareProjectsQuery,
|
|
want: want{
|
|
sqlExpectations: mockQueryErr(
|
|
regexp.QuoteMeta(`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting,`+
|
|
` COUNT(*) OVER ()`+
|
|
` FROM zitadel.projections.projects`),
|
|
sql.ErrConnDone,
|
|
),
|
|
err: func(err error) (error, bool) {
|
|
if !errors.Is(err, sql.ErrConnDone) {
|
|
return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
|
|
}
|
|
return nil, true
|
|
},
|
|
},
|
|
object: nil,
|
|
},
|
|
{
|
|
name: "prepareProjectQuery no result",
|
|
prepare: prepareProjectQuery,
|
|
want: want{
|
|
sqlExpectations: mockQueries(
|
|
`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting`+
|
|
` FROM zitadel.projections.projects`,
|
|
nil,
|
|
nil,
|
|
),
|
|
err: func(err error) (error, bool) {
|
|
if !errs.IsNotFound(err) {
|
|
return fmt.Errorf("err should be zitadel.NotFoundError got: %w", err), false
|
|
}
|
|
return nil, true
|
|
},
|
|
},
|
|
object: (*Project)(nil),
|
|
},
|
|
{
|
|
name: "prepareProjectQuery found",
|
|
prepare: prepareProjectQuery,
|
|
want: want{
|
|
sqlExpectations: mockQuery(
|
|
regexp.QuoteMeta(`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting`+
|
|
` FROM zitadel.projections.projects`),
|
|
[]string{
|
|
"id",
|
|
"creation_date",
|
|
"change_date",
|
|
"resource_owner",
|
|
"state",
|
|
"sequence",
|
|
"name",
|
|
"project_role_assertion",
|
|
"project_role_check",
|
|
"has_project_check",
|
|
"private_labeling_setting",
|
|
},
|
|
[]driver.Value{
|
|
"id",
|
|
testNow,
|
|
testNow,
|
|
"ro",
|
|
domain.ProjectStateActive,
|
|
uint64(20211108),
|
|
"project-name",
|
|
true,
|
|
true,
|
|
true,
|
|
domain.PrivateLabelingSettingEnforceProjectResourceOwnerPolicy,
|
|
},
|
|
),
|
|
},
|
|
object: &Project{
|
|
ID: "id",
|
|
CreationDate: testNow,
|
|
ChangeDate: testNow,
|
|
ResourceOwner: "ro",
|
|
State: domain.ProjectStateActive,
|
|
Sequence: 20211108,
|
|
Name: "project-name",
|
|
ProjectRoleAssertion: true,
|
|
ProjectRoleCheck: true,
|
|
HasProjectCheck: true,
|
|
PrivateLabelingSetting: domain.PrivateLabelingSettingEnforceProjectResourceOwnerPolicy,
|
|
},
|
|
},
|
|
{
|
|
name: "prepareProjectQuery sql err",
|
|
prepare: prepareProjectQuery,
|
|
want: want{
|
|
sqlExpectations: mockQueryErr(
|
|
regexp.QuoteMeta(`SELECT zitadel.projections.projects.id,`+
|
|
` zitadel.projections.projects.creation_date,`+
|
|
` zitadel.projections.projects.change_date,`+
|
|
` zitadel.projections.projects.resource_owner,`+
|
|
` zitadel.projections.projects.state,`+
|
|
` zitadel.projections.projects.sequence,`+
|
|
` zitadel.projections.projects.name,`+
|
|
` zitadel.projections.projects.project_role_assertion,`+
|
|
` zitadel.projections.projects.project_role_check,`+
|
|
` zitadel.projections.projects.has_project_check,`+
|
|
` zitadel.projections.projects.private_labeling_setting`+
|
|
` FROM zitadel.projections.projects`),
|
|
sql.ErrConnDone,
|
|
),
|
|
err: func(err error) (error, bool) {
|
|
if !errors.Is(err, sql.ErrConnDone) {
|
|
return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
|
|
}
|
|
return nil, true
|
|
},
|
|
},
|
|
object: nil,
|
|
},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
assertPrepare(t, tt.prepare, tt.object, tt.want.sqlExpectations, tt.want.err)
|
|
})
|
|
}
|
|
}
|