Method addMemberToWorkspaceIAM

backend/tests/tests.go:371–404

signupAndLogin will signup and login as user demo@example.com. addMemberToWorkspaceIAM adds a member as workspace role to the current workspace.

(ctx context.Context, workspace, member, role string)

// signupAndLogin will signup and login as user demo@example.com.
// addMemberToWorkspaceIAM adds a member as workspace role to the current workspace.
func (ctl *controller) addMemberToWorkspaceIAM(ctx context.Context, workspace, member, role string) (*v1pb.IamPolicy, error) {
	policyResp, err := ctl.workspaceServiceClient.GetIamPolicy(ctx, connect.NewRequest(&v1pb.GetIamPolicyRequest{
		Resource: workspace,
	}))
	if err != nil {
		return nil, err
	}

	policy := policyResp.Msg
	found := false
	for _, binding := range policy.Bindings {
		if binding.Role == role {
			binding.Members = append(binding.Members, member)
			found = true
			break
		}
	}
	if !found {
		policy.Bindings = append(policy.Bindings, &v1pb.Binding{
			Role:    role,
			Members: []string{member},
		})
	}

	updated, err := ctl.workspaceServiceClient.SetIamPolicy(ctx, connect.NewRequest(&v1pb.SetIamPolicyRequest{
		Etag:     policy.Etag,
		Policy:   policy,
		Resource: workspace,
	}))
	if err != nil {
		return nil, err
	}
	return updated.Msg, nil
}

func (ctl *controller) signupAndLogin(ctx context.Context) (string, error) {
	// Use Signup API (creates principal + workspace) then Login to get a token.