mirror of https://github.com/ory/hydra
87 lines
2.6 KiB
Go
87 lines
2.6 KiB
Go
// Copyright © 2022 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package cmd_test
|
|
|
|
import (
|
|
"context"
|
|
"encoding/base64"
|
|
"net/http/httptest"
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/go-jose/go-jose/v3"
|
|
"github.com/gofrs/uuid"
|
|
"github.com/spf13/cobra"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/ory/hydra/v2/client"
|
|
"github.com/ory/hydra/v2/driver"
|
|
"github.com/ory/hydra/v2/internal/testhelpers"
|
|
"github.com/ory/x/cmdx"
|
|
"github.com/ory/x/snapshotx"
|
|
)
|
|
|
|
func base64EncodedPGPPublicKey(t *testing.T) string {
|
|
t.Helper()
|
|
gpgPublicKey, err := os.ReadFile("../test/stub/pgp.pub")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
return base64.StdEncoding.EncodeToString(gpgPublicKey)
|
|
}
|
|
|
|
func setupRoutes(t *testing.T, cmd *cobra.Command) (*httptest.Server, *httptest.Server, *driver.RegistrySQL) {
|
|
ctx, cancel := context.WithCancel(context.Background())
|
|
t.Cleanup(cancel)
|
|
|
|
reg := testhelpers.NewRegistryMemory(t)
|
|
public, admin := testhelpers.NewOAuth2Server(ctx, t, reg)
|
|
|
|
cmdx.RegisterHTTPClientFlags(cmd.Flags())
|
|
cmdx.RegisterFormatFlags(cmd.Flags())
|
|
require.NoError(t, cmd.Flags().Set(cmdx.FlagFormat, string(cmdx.FormatJSON)))
|
|
return public, admin, reg
|
|
}
|
|
|
|
func setup(t *testing.T, cmd *cobra.Command) *driver.RegistrySQL {
|
|
_, admin, reg := setupRoutes(t, cmd)
|
|
require.NoError(t, cmd.Flags().Set(cmdx.FlagEndpoint, admin.URL))
|
|
require.NoError(t, cmd.Flags().Set(cmdx.FlagFormat, string(cmdx.FormatJSON)))
|
|
return reg
|
|
}
|
|
|
|
var snapshotExcludedClientFields = []snapshotx.Opt{
|
|
snapshotx.ExceptNestedKeys("client_id"),
|
|
snapshotx.ExceptNestedKeys("registration_access_token"),
|
|
snapshotx.ExceptNestedKeys("registration_client_uri"),
|
|
snapshotx.ExceptNestedKeys("client_secret"),
|
|
snapshotx.ExceptNestedKeys("created_at"),
|
|
snapshotx.ExceptNestedKeys("updated_at"),
|
|
}
|
|
|
|
func createClientCredentialsClient(t *testing.T, reg *driver.RegistrySQL) *client.Client {
|
|
return createClient(t, reg, &client.Client{
|
|
GrantTypes: []string{"client_credentials"},
|
|
TokenEndpointAuthMethod: "client_secret_basic",
|
|
Secret: uuid.Must(uuid.NewV4()).String(),
|
|
})
|
|
}
|
|
|
|
func createClient(t *testing.T, reg *driver.RegistrySQL, c *client.Client) *client.Client {
|
|
if c == nil {
|
|
c = &client.Client{TokenEndpointAuthMethod: "client_secret_post", Secret: uuid.Must(uuid.NewV4()).String()}
|
|
}
|
|
secret := c.Secret
|
|
require.NoError(t, reg.ClientManager().CreateClient(t.Context(), c))
|
|
c.Secret = secret
|
|
return c
|
|
}
|
|
|
|
func createJWK(t *testing.T, reg *driver.RegistrySQL, set string, alg string) jose.JSONWebKey {
|
|
c, err := reg.KeyManager().GenerateAndPersistKeySet(t.Context(), set, "", alg, "sig")
|
|
require.NoError(t, err)
|
|
return c.Keys[0]
|
|
}
|