Function TestGetPrincipal

auth/auth_test.go:1216–1275

(t *testing.T)

}

func TestGetPrincipal(t *testing.T) {
	ctx := base.TestCtx(t)
	testBucket := base.GetTestBucket(t)
	defer testBucket.Close(ctx)
	dataStore := testBucket.GetSingleDataStore()
	auth := NewTestAuthenticator(t, dataStore, nil, DefaultAuthenticatorOptions(ctx))

	const (
		channelRead       = "read"
		channelWrite      = "write"
		channelExecute    = "execute"
		channelCreate     = "create"
		channelUpdate     = "update"
		channelDelete     = "delete"
		roleRoot          = "root"
		roleUser          = "user"
		username          = "batman"
		password          = "YmF0bWFu"
		accessViewKeyRoot = "role:root"
		accessViewKeyUser = "role:user"
	)

	// Create a new role named root with access to read, write and execute channels
	role, _ := auth.NewRole(roleRoot, ch.BaseSetOf(t, channelRead, channelWrite, channelExecute))
	assert.Equal(t, nil, auth.Save(role))

	// Create another role named user with access to read and execute channels; no write channel access.
	role, _ = auth.NewRole(roleUser, ch.BaseSetOf(t, channelRead, channelExecute))
	assert.Equal(t, nil, auth.Save(role))

	// Get the principal against root role and verify the details.
	principal, err := auth.GetPrincipal(roleRoot, false)
	assert.NoError(t, err)
	assert.Equal(t, roleRoot, principal.Name())
	assert.Equal(t, accessViewKeyRoot, principal.accessViewKey())
	requireCanSeeChannels(t, principal, channelRead, channelWrite, channelExecute)

	// Get the principal against user role and verify the details.
	principal, err = auth.GetPrincipal(roleUser, false)
	assert.NoError(t, err)
	assert.Equal(t, roleUser, principal.Name())
	assert.Equal(t, accessViewKeyUser, principal.accessViewKey())
	requireCanSeeChannels(t, principal, channelRead, channelExecute)
	requireCannotSeeChannels(t, principal, channelWrite)

	// Create a new user with new set of channels and assign user role to the user.
	user, err := auth.NewUser(username, password, ch.BaseSetOf(
		t, channelCreate, channelRead, channelUpdate, channelDelete))
	require.NoError(t, err)
	user.(*userImpl).setRolesSince(ch.TimedSet{roleUser: ch.NewVbSimpleSequence(0x3)})
	require.NoError(t, auth.Save(user))

	// Get the principal of user and verify the details
	principal, err = auth.GetPrincipal(username, true)
	assert.NoError(t, err)
	assert.Equal(t, username, principal.Name())
	assert.Equal(t, username, principal.accessViewKey())
	requireCanSeeChannels(t, principal, channelRead, channelExecute, channelCreate, channelUpdate, channelDelete)