(t *testing.T)
| 139 | } |
| 140 | |
| 141 | func TestEnrollTokenExpired(t *testing.T) { |
| 142 | ca := newTestCA(t) |
| 143 | store := enrolltokens.NewMemoryStore() |
| 144 | ctx := context.Background() |
| 145 | tok := enrolltokens.Token{Token: "tk-exp", NodeID: "n", ExpiresAt: time.Now().Add(-time.Minute)} |
| 146 | _ = store.Insert(ctx, tok) |
| 147 | |
| 148 | // Sanity: confirm Consume reports expired. |
| 149 | if _, err := store.Consume(ctx, tok.Token); !errors.Is(err, enrolltokens.ErrExpired) { |
| 150 | t.Fatalf("expected ErrExpired, got %v", err) |
| 151 | } |
| 152 | // Re-insert (Consume above doesn't delete) - actually Consume on expired doesn't mark consumed in memory store. |
| 153 | // But to keep this test self-contained, build a fresh store: |
| 154 | store = enrolltokens.NewMemoryStore() |
| 155 | _ = store.Insert(ctx, tok) |
| 156 | |
| 157 | mux := http.NewServeMux() |
| 158 | RegisterEnrollEndpoint(mux, ca, store, "") |
| 159 | w := doEnroll(t, mux, enrollRequest{NodeID: "n", CSRPem: newTestCSR(t, "n"), Token: tok.Token}) |
| 160 | if w.Code != http.StatusUnauthorized { |
| 161 | t.Fatalf("status=%d", w.Code) |
| 162 | } |
| 163 | } |
| 164 | |
| 165 | func TestEnrollNodeIDMismatch(t *testing.T) { |
| 166 | ca := newTestCA(t) |
nothing calls this directly
no test coverage detected