Function TestAdminAuthWithX509

rest/admin_api_auth_test.go:438–477

(t *testing.T)

}

func TestAdminAuthWithX509(t *testing.T) {
	serverURL := base.UnitTestUrl()
	if !base.ServerIsTLS(serverURL) {
		t.Skipf("URI %s needs to start with couchbases://", serverURL)
	}
	ctx := base.TestCtx(t)
	tb, caCertPath, certPath, keyPath := setupX509Tests(t, true)
	defer tb.Close(ctx)

	svrctx := NewServerContext(ctx, &StartupConfig{
		Bootstrap: BootstrapConfig{
			Server:       serverURL,
			X509CertPath: certPath,
			X509KeyPath:  keyPath,
			CACertPath:   caCertPath,
		},
	}, false)
	defer svrctx.Close(ctx)

	goCBAgent, err := svrctx.initializeGoCBAgent(ctx)
	require.NoError(t, err)
	svrctx.GoCBAgent = goCBAgent

	noX509HttpClient, err := svrctx.initializeNoX509HttpClient(ctx)
	require.NoError(t, err)
	svrctx.NoX509HTTPClient = noX509HttpClient

	managementEndpoints, httpClient, err := svrctx.ObtainManagementEndpointsAndHTTPClient()
	require.NoError(t, err)

	var statusCode int
	_, statusCode, err = checkAdminAuth(ctx, "", base.TestClusterUsername(), base.TestClusterPassword(), "", httpClient, managementEndpoints, true, []Permission{{"!admin", false}}, nil)
	assert.NoError(t, err)
	assert.Equal(t, http.StatusOK, statusCode)

	_, statusCode, err = checkAdminAuth(ctx, "", "invalidUser", "invalidPassword", "", httpClient, managementEndpoints, true, []Permission{{"!admin", false}}, nil)
	assert.NoError(t, err)
	assert.Equal(t, http.StatusUnauthorized, statusCode)
	require.Contains(t, err.Error(), ErrInvalidLogin.Message)
}

func TestAdminAPIAuth(t *testing.T) {
	base.LongRunningTest(t)