Function findSSHCheckAuthID

integration/ssh_test.go:691–721

findSSHCheckAuthID polls headscale container logs for the SSH action auth-id. The SSH action handler logs "SSH action follow-up" with the auth_id on the follow-up request (where auth_id is non-empty).

(t *testing.T, headscale ControlServer)

// The SSH action handler logs "SSH action follow-up" with the auth_id on the
// follow-up request (where auth_id is non-empty).
func findSSHCheckAuthID(t *testing.T, headscale ControlServer) string {
	t.Helper()

	var authID string

	assert.EventuallyWithT(t, func(c *assert.CollectT) {
		_, stderr, err := headscale.ReadLog()
		assert.NoError(c, err)

		for line := range strings.SplitSeq(stderr, "\n") {
			if !strings.Contains(line, "SSH action follow-up") {
				continue
			}

			if idx := strings.Index(line, "auth_id="); idx != -1 {
				start := idx + len("auth_id=")

				end := strings.IndexByte(line[start:], ' ')
				if end == -1 {
					end = len(line[start:])
				}

				authID = line[start : start+end]
			}
		}

		assert.NotEmpty(c, authID, "auth-id not found in headscale logs")
	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "waiting for SSH check auth-id in headscale logs")

	return authID
}

// sshCheckPolicy returns a [policyv2.Policy] with SSH "check" mode for group:integration-test
// targeting autogroup:member and autogroup:tagged destinations.