Function TestEffectiveUserID

rest/audit_test.go:783–827

(t *testing.T)

}

func TestEffectiveUserID(t *testing.T) {
	tempdir := t.TempDir()
	base.ResetGlobalTestLogging(t)
	base.InitializeMemoryLoggers()
	const (
		headerUser   = "user"
		headerDomain = "domain"
		cnfDomain    = "myDomain"
		cnfUser      = "bob"
		realUser     = "alice"
		realDomain   = "sgw"
	)
	reqHeaders := map[string]string{
		"user_header":   fmt.Sprintf(`{"%s": "%s", "%s":"%s"}`, headerDomain, cnfDomain, headerUser, cnfUser),
		"Authorization": GetBasicAuthHeader(t, realUser, RestTesterDefaultUserPassword),
	}

	rt := NewRestTester(t, &RestTesterConfig{
		GuestEnabled:     true,
		PersistentConfig: true,
		MutateStartupConfig: func(config *StartupConfig) {
			config.Unsupported.EffectiveUserHeaderName = base.Ptr("user_header")
			config.Logging = getAuditLoggingTestConfig(tempdir)
			require.NoError(t, config.SetupAndValidateLogging(base.TestCtx(t)))
		},
	})
	defer rt.Close()
	RequireStatus(t, rt.CreateDatabase("db", rt.NewDbConfig()), http.StatusCreated)
	rt.CreateUser(realUser, nil)

	action := func(t testing.TB) {
		RequireStatus(t, rt.SendRequestWithHeaders(http.MethodGet, "/{{.db}}/", "", reqHeaders), http.StatusOK)
	}
	output := base.AuditLogContents(t, action)
	events := jsonLines(t, output)

	for _, event := range events {
		effective := event[base.AuditEffectiveUserID].(map[string]any)
		assert.Equal(t, cnfDomain, effective[base.AuditFieldEffectiveUserIDDomain])
		assert.Equal(t, cnfUser, effective[base.AuditFieldEffectiveUserIDUser])
		realUserEvent := event[base.AuditFieldRealUserID].(map[string]any)
		assert.Equal(t, realDomain, realUserEvent[base.AuditFieldRealUserIDDomain])
		assert.Equal(t, realUser, realUserEvent[base.AuditFieldRealUserIDUser])
	}
}

func TestAuditDocumentRead(t *testing.T) {
	rt := createAuditLoggingRestTester(t)