Function TestIntegrationE2ESyncUser

backend/wireguard/integration_e2e_test.go:560–606

(t *testing.T)

}

func TestIntegrationE2ESyncUser(t *testing.T) {
	mustHaveCommands(t, "ip", "wg", "curl")

	const (
		iface       = "wg-e2e-su2"
		wgPort      = 51932
		configCIDR  = "10.210.2.1/24"
		allowedUser = "allowed-syncuser@example.com"
		deniedUser  = "denied-syncuser@example.com"
	)

	serverPrivateKey := mustGeneratePrivateKey(t)

	allowedPriv, allowedPub, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate allowed user keys: %v", err)
	}
	deniedPriv, deniedPub, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate denied user keys: %v", err)
	}

	configJSON := fmt.Sprintf(
		`{"interface_name":"%s","listen_port":%d,"private_key":"%s","address":["%s"],"tag":"test-node"}`,
		iface, wgPort, serverPrivateKey, configCIDR,
	)
	wg := createTestWireGuard(t, configJSON)
	defer wg.Shutdown()

	if err := wg.SyncUser(context.Background(), buildWGUser(allowedUser, allowedPub, "10.210.2.2/32", iface, true)); err != nil {
		t.Fatalf("failed SyncUser for allowed user: %v", err)
	}
	if err := wg.SyncUser(context.Background(), buildWGUser(deniedUser, deniedPub, "10.210.2.3/32", iface, false)); err != nil {
		t.Fatalf("failed SyncUser for denied user: %v", err)
	}

	url, serverWGIP := startWGHTTPServer(t, wg)
	serverPublicKey := wireGuardServerPublicKey(t, wg)

	allowedNS := createNamespaceFixture(t, 63)
	deniedNS := createNamespaceFixture(t, 64)

	configureNamespaceWGClient(t, allowedNS, "wgc0", allowedPriv, mustUserPeerIP(t, wg, allowedUser), serverPublicKey, wgPort, serverWGIP)
	configureNamespaceWGClient(t, deniedNS, "wgc1", deniedPriv, "10.210.2.250", serverPublicKey, wgPort, serverWGIP)

	runConnectDisconnectAssertions(t, wg, allowedUser, deniedUser, allowedNS.name, deniedNS.name, url)
}

func TestIntegrationE2ESyncUsers(t *testing.T) {
	mustHaveCommands(t, "ip", "wg", "curl")