Function TestHostBasedAuthentication

internal/postgres/hba_test.go:43–80

(t *testing.T)

}

func TestHostBasedAuthentication(t *testing.T) {
	assert.Equal(t, `local all "postgres","pgo" "peer"`,
		NewHBA().Local().Users("postgres", "pgo").Method("peer").String())

	assert.Equal(t, `host all all "::1/128" "trust"`,
		NewHBA().TCP().Network("::1/128").Method("trust").String())

	assert.Equal(t, `host replication "KD6-3.7" samenet "scram-sha-256"`,
		NewHBA().TCP().SameNetwork().Replication().
			Users("KD6-3.7").Method("scram-sha-256").
			String())

	assert.Equal(t, `hostssl "data","bits" all all "md5"  "clientcert"="verify-ca"`,
		NewHBA().TLS().Databases("data", "bits").
			Method("md5").Options(map[string]string{"clientcert": "verify-ca"}).
			String())

	assert.Equal(t, `hostnossl all all all "reject"`,
		NewHBA().NoSSL().Method("reject").String())

	t.Run("OptionsSorted", func(t *testing.T) {
		assert.Equal(t, `hostssl all all all "ldap"  "ldapbasedn"="dc=example,dc=org" "ldapserver"="example.org"`,
			NewHBA().TLS().Method("ldap").Options(map[string]string{
				"ldapserver": "example.org",
				"ldapbasedn": "dc=example,dc=org",
			}).String())
	})

	t.Run("SpecialCharactersEscaped", func(t *testing.T) {
		// Databases; slash U+002F triggers regex escaping; regex characters themselves do not
		assert.Equal(t, `local "/^[/]asdf_[+][?]1234$","/^[/][*][$]$","+*$" all`,
			NewHBA().Local().Databases(`/asdf_+?1234`, `/*$`, `+*$`).String())

		// Users; slash U+002F triggers regex escaping; regex characters themselves do not
		assert.Equal(t, `local all "/^[/]asdf_[+][?]1234$","/^[/][*][$]$","+*$"`,
			NewHBA().Local().Users(`/asdf_+?1234`, `/*$`, `+*$`).String())
	})
}

func TestOrderedHBAs(t *testing.T) {
	ordered := new(OrderedHBAs)