Function TestIntegrationE2EUpdateUsers

backend/wireguard/integration_e2e_test.go:657–718

(t *testing.T)

}

func TestIntegrationE2EUpdateUsers(t *testing.T) {
	mustHaveCommands(t, "ip", "wg", "curl")

	const (
		iface       = "wg-e2e-upd"
		wgPort      = 51934
		configCIDR  = "10.210.4.1/24"
		allowedUser = "allowed-update@example.com"
		deniedUser  = "denied-update@example.com"
	)

	serverPrivateKey := mustGeneratePrivateKey(t)

	allowedPriv, allowedPub, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate allowed user keys: %v", err)
	}
	deniedPriv, deniedPub, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate denied user keys: %v", err)
	}

	configJSON := fmt.Sprintf(
		`{"interface_name":"%s","listen_port":%d,"private_key":"%s","address":["%s"],"tag":"test-node"}`,
		iface, wgPort, serverPrivateKey, configCIDR,
	)
	wg := createTestWireGuard(t, configJSON)
	defer wg.Shutdown()

	seedUsers := []*common.User{
		buildWGUser(allowedUser, allowedPub, "10.210.4.2/32", iface, true),
		buildWGUser(deniedUser, deniedPub, "10.210.4.3/32", iface, true),
	}
	if err := wg.SyncUsers(context.Background(), seedUsers); err != nil {
		t.Fatalf("failed initial SyncUsers seed: %v", err)
	}

	deniedOldIP := mustUserPeerIP(t, wg, deniedUser)

	updateUsers := []*common.User{
		buildWGUser(allowedUser, allowedPub, "10.210.4.2/32", iface, true),
		buildWGUser(deniedUser, deniedPub, "10.210.4.3/32", iface, false),
	}
	if err := wg.UpdateUsers(context.Background(), updateUsers); err != nil {
		t.Fatalf("failed UpdateUsers: %v", err)
	}

	if peer := wg.peerStore.GetByEmail(deniedUser); peer != nil {
		t.Fatalf("expected denied user peers removed after UpdateUsers, got peer with key %s", peer.PublicKey)
	}

	url, serverWGIP := startWGHTTPServer(t, wg)
	serverPublicKey := wireGuardServerPublicKey(t, wg)

	allowedNS := createNamespaceFixture(t, 67)
	deniedNS := createNamespaceFixture(t, 68)

	configureNamespaceWGClient(t, allowedNS, "wgc0", allowedPriv, mustUserPeerIP(t, wg, allowedUser), serverPublicKey, wgPort, serverWGIP)