Function _write_profile

tests/lib/test_credentials.py:136–165

Test helper: lay out `configs/ .json` and optionally `credentials/ .json` under `config_dir`. Accepts either the new nested `{"authentication": {...}}` shape or a legacy flat shape (`{"type": "workload_identity", ...}`) for backwards compatibility with the tests that

(
    config_dir: pathlib.Path,
    profile: str,
    config: Dict[str, Any],
    credentials: Optional[Dict[str, Any]] = None,
)

def _write_profile(
    config_dir: pathlib.Path,
    profile: str,
    config: Dict[str, Any],
    credentials: Optional[Dict[str, Any]] = None,
) -> None:
    """Test helper: lay out `configs/<profile>.json` and optionally
    `credentials/<profile>.json` under `config_dir`.

    Accepts either the new nested `{"authentication": {...}}` shape or a
    legacy flat shape (`{"type": "workload_identity", ...}`) for backwards
    compatibility with the tests that predate the schema migration. Legacy
    inputs are translated via `_migrate_legacy_config` before being
    written to disk.

    Prepends `"type": "oauth_token"` to the credentials dict unless the
    caller already supplied a `type` key (so negative tests can override).
    """
    if "type" in config and "authentication" not in config:
        config = _migrate_legacy_config(config)
    (config_dir / "configs").mkdir(parents=True, exist_ok=True)
    (config_dir / "configs" / f"{profile}.json").write_text(json.dumps(config))
    if credentials is not None:
        if "type" not in credentials:
            credentials = {"type": "oauth_token", **credentials}
        (config_dir / "credentials").mkdir(parents=True, exist_ok=True)
        creds_path = config_dir / "credentials" / f"{profile}.json"
        creds_path.write_text(json.dumps(credentials))
        # Match the 0o600 invariant the real credentials reader now enforces.
        creds_path.chmod(0o600)


# --------------------------------------------------------------------------- #