Function TestServerlessUnsuspendAdminAuth

rest/serverless_test.go:641–682

Makes sure admin API calls do not unsuspend DB if they fail authentication

(t *testing.T)

// Makes sure admin API calls do not unsuspend DB if they fail authentication
func TestServerlessUnsuspendAdminAuth(t *testing.T) {
	RequireBucketSpecificCredentials(t)
	ctx := base.TestCtx(t)
	// Get test bucket
	tb := base.GetTestBucket(t)
	defer tb.Close(ctx)

	rt := NewRestTester(t, &RestTesterConfig{CustomTestBucket: tb.NoCloseClone(), PersistentConfig: true, serverless: true, AdminInterfaceAuthentication: true})
	defer rt.Close()

	sc := rt.ServerContext()

	resp := rt.SendAdminRequestWithAuth(http.MethodPut, "/db/", fmt.Sprintf(`{
		"bucket": "%s",
		"use_views": %t,
		"num_index_replicas": 0
	}`, tb.GetName(), base.TestsDisableGSI()), base.TestClusterUsername(), base.TestClusterPassword())
	RequireStatus(t, resp, http.StatusCreated)

	err := sc.suspendDatabase(t, rt.Context(), "db")
	assert.NoError(t, err)

	// Confirm db is suspended
	require.True(t, sc.isDatabaseSuspended(t, "db"))
	require.Nil(t, sc._databases["db"])

	// Confirm unauthenticated admin request does not trigger unsuspend
	resp = rt.SendAdminRequest(http.MethodGet, "/db/doc", "")
	AssertStatus(t, resp, http.StatusUnauthorized)
	require.Nil(t, sc._databases["db"]) // Confirm suspended
	require.True(t, sc.isDatabaseSuspended(t, "db"))

	// Confirm authenticated admin request triggers unsuspend
	resp = rt.SendAdminRequestWithAuth(http.MethodGet, "/db/doc", "", base.TestClusterUsername(), base.TestClusterPassword())
	AssertStatus(t, resp, http.StatusNotFound)
	require.NotNil(t, sc._databases["db"]) // Confirm unsuspended
	require.False(t, sc.isDatabaseSuspended(t, "db"))

	// Attempt to get DB that does not exist
	resp = rt.SendAdminRequestWithAuth(http.MethodGet, "/invaliddb/doc", "", base.TestClusterUsername(), base.TestClusterPassword())
	AssertHTTPErrorReason(t, resp, http.StatusForbidden, "")
}

func TestImportPartitionsServerless(t *testing.T) {
	RequireBucketSpecificCredentials(t)