Function TestCheckPermissionsWithX509

rest/admin_api_auth_test.go:140–174

(t *testing.T)

}

func TestCheckPermissionsWithX509(t *testing.T) {
	serverURL := base.UnitTestUrl()
	if !base.ServerIsTLS(serverURL) {
		t.Skipf("URI %s needs to start with couchbases://", serverURL)
	}
	ctx := base.TestCtx(t)
	tb, caCertPath, certPath, keyPath := setupX509Tests(t, true)
	defer tb.Close(ctx)

	svrctx := NewServerContext(ctx, &StartupConfig{
		Bootstrap: BootstrapConfig{
			Server:       serverURL,
			X509CertPath: certPath,
			X509KeyPath:  keyPath,
			CACertPath:   caCertPath,
		},
	}, false)
	defer svrctx.Close(ctx)

	goCBAgent, err := svrctx.initializeGoCBAgent(ctx)
	require.NoError(t, err)
	svrctx.GoCBAgent = goCBAgent

	noX509HttpClient, err := svrctx.initializeNoX509HttpClient(ctx)
	require.NoError(t, err)
	svrctx.NoX509HTTPClient = noX509HttpClient

	eps, httpClient, err := svrctx.ObtainManagementEndpointsAndHTTPClient()
	assert.NoError(t, err)

	statusCode, _, err := CheckPermissions(ctx, httpClient, eps, "", base.TestClusterUsername(), base.TestClusterPassword(), []Permission{Permission{"!admin", false}}, nil)
	assert.NoError(t, err)

	assert.Equal(t, http.StatusOK, statusCode)
}

func TestCheckRoles(t *testing.T) {
	if base.UnitTestUrlIsWalrus() {