Function _write_profile

tests/lib/test_credentials.py:122–151

Test helper: lay out ``configs/ .json`` and optionally ``credentials/ .json`` under ``config_dir``. Accepts either the new nested ``{"authentication": {...}}`` shape or a legacy flat shape (``{"type": "workload_identity", ...}``) for backwards compatibility with the

(
    config_dir: pathlib.Path,
    profile: str,
    config: Dict[str, Any],
    credentials: Optional[Dict[str, Any]] = None,
)

def _write_profile(
    config_dir: pathlib.Path,
    profile: str,
    config: Dict[str, Any],
    credentials: Optional[Dict[str, Any]] = None,
) -> None:
    """Test helper: lay out ``configs/<profile>.json`` and optionally
    ``credentials/<profile>.json`` under ``config_dir``.

    Accepts either the new nested ``{"authentication": {...}}`` shape or a
    legacy flat shape (``{"type": "workload_identity", ...}``) for backwards
    compatibility with the tests that predate the schema migration. Legacy
    inputs are translated via :func:`_migrate_legacy_config` before being
    written to disk.

    Prepends ``"type": "oauth_token"`` to the credentials dict unless the
    caller already supplied a ``type`` key (so negative tests can override).
    """
    if "type" in config and "authentication" not in config:
        config = _migrate_legacy_config(config)
    (config_dir / "configs").mkdir(parents=True, exist_ok=True)
    (config_dir / "configs" / f"{profile}.json").write_text(json.dumps(config))
    if credentials is not None:
        if "type" not in credentials:
            credentials = {"type": "oauth_token", **credentials}
        (config_dir / "credentials").mkdir(parents=True, exist_ok=True)
        creds_path = config_dir / "credentials" / f"{profile}.json"
        creds_path.write_text(json.dumps(credentials))
        # Match the 0o600 invariant the real credentials reader now enforces.
        creds_path.chmod(0o600)


# --------------------------------------------------------------------------- #