Function TestConcurrentSetConfig

auth/oidc_test.go:269–325

(t *testing.T)

}

func TestConcurrentSetConfig(t *testing.T) {
	providerLock := sync.Mutex{}
	provider := oidcProviderForTest(t, &OIDCProvider{
		JWTConfigCommon: JWTConfigCommon{
			ClientID: base.Ptr("foo"),
			Issuer:   "https://accounts.google.com",
		},
		CallbackURL: base.Ptr("http://sgw-test:4984/_callback"),
	})

	ctx := base.TestCtx(t)

	err := provider.initOIDCClient(ctx)
	require.NoError(t, err, "openid connect client initialization failure")
	metadata, verifier, err := provider.DiscoverConfig(ctx)
	require.NoError(t, err, "error discovering provider metadata")

	expectedAuthURL := []string{
		"https://accounts.foo.com/o/oauth2/v2/auth",
		"https://accounts.bar.com/o/oauth2/v2/auth",
	}
	expectedTokenURL := []string{
		"https://oauth2.foo.com/token",
		"https://oauth2.bar.com/token",
	}

	var wg sync.WaitGroup
	wg.Add(2)
	go func() {
		fooMetadata := metadata
		fooMetadata.AuthorizationEndpoint = expectedAuthURL[0]
		fooMetadata.TokenEndpoint = expectedTokenURL[0]
		providerLock.Lock()
		verifier = provider.generateVerifier(&fooMetadata, ctx)
		require.NotNil(t, verifier, "error generating id token verifier")
		provider.client.SetConfig(verifier, fooMetadata.endpoint())
		providerLock.Unlock()
		wg.Done()
	}()
	go func() {
		barMetadata := metadata
		barMetadata.AuthorizationEndpoint = expectedAuthURL[1]
		barMetadata.TokenEndpoint = expectedTokenURL[1]
		providerLock.Lock()
		verifier = provider.generateVerifier(&barMetadata, ctx)
		require.NotNil(t, verifier, "error generating id token verifier")
		provider.client.SetConfig(verifier, barMetadata.endpoint())
		providerLock.Unlock()
		wg.Done()
	}()
	wg.Wait()
	provider.client.mutex.RLock()
	assert.NotNil(t, provider.client.verifier, "error setting verifier")
	provider.client.mutex.RUnlock()
	assert.Contains(t, expectedAuthURL, provider.client.Config().Endpoint.AuthURL)
	assert.Contains(t, expectedTokenURL, provider.client.Config().Endpoint.TokenURL)
}