Function TestOpenIDConnectAuthCodeFlow

rest/oidc_api_test.go:535–944

E2E test that checks OpenID Connect Authorization Code Flow.

(t *testing.T)

// E2E test that checks OpenID Connect Authorization Code Flow.
func TestOpenIDConnectAuthCodeFlow(t *testing.T) {

	base.LongRunningTest(t)
	type test struct {
		name                string
		providers           auth.OIDCProviderMap
		defaultProvider     string
		authURL             string
		forceAuthError      forceError
		forceRefreshError   forceError
		requireExistingUser bool
	}
	tests := []test{
		{
			// Successful new user authentication against single provider
			// with auto registration and access token enabled.
			name: "successful user registration against single provider",
			providers: auth.OIDCProviderMap{
				"foo": mockProviderWith("foo", mockProviderRegister{}, mockProviderIncludeAccessToken{}, mockProviderUserPrefix{"foo"}),
			},
			defaultProvider: "foo",
			authURL:         "/db/_oidc?provider=foo&offline=true",
		}, {
			// Unsuccessful new user authentication against single provider with
			// auto registration disabled.
			name: "unsuccessful user registration against single provider",
			providers: auth.OIDCProviderMap{
				"foo": mockProvider("foo"),
			},
			defaultProvider: "foo",
			authURL:         "/db/_oidc?provider=foo&offline=true",
			forceAuthError: forceError{
				errorType:            noAutoRegistrationErr,
				expectedErrorCode:    http.StatusUnauthorized,
				expectedErrorMessage: ErrInvalidLogin.Message,
			},
		}, {
			// Successful new user authentication against single provider with auto
			// registration enabled but access token NOT.
			name: "successful user registration against single provider without access token",
			providers: auth.OIDCProviderMap{
				"foo": mockProviderWith("foo", mockProviderRegister{}, mockProviderUserPrefix{"foo"}),
			},
			defaultProvider: "foo",
			authURL:         "/db/_oidc?provider=foo&offline=true",
		}, {
			// Successful new user authentication against multiple providers
			// with auto registration and access token enabled.
			name: "successful user registration against multiple providers",
			providers: auth.OIDCProviderMap{
				"foo": mockProviderWith("foo", mockProviderRegister{}, mockProviderIncludeAccessToken{}, mockProviderUserPrefix{"foo"}),
				"bar": mockProviderWith("bar", mockProviderRegister{}, mockProviderIncludeAccessToken{}, mockProviderUserPrefix{"bar"}),
			},
			defaultProvider: "foo",
			authURL:         "/db/_oidc?provider=foo&offline=true",
		}, {
			// Unsuccessful new user authentication against multiple providers with
			// auto registration disabled.