Function TestAuthAddCmd_DriveScopeFile

internal/cmd/auth_add_test.go:593–640

(t *testing.T)

}

func TestAuthAddCmd_DriveScopeFile(t *testing.T) {
	openSecretsStore, authorizeGoogle, ensureKeychainAccess, fetchAuthorizedIdentity := defaultAuthTestOperations()
	execute := func(args []string) error {
		return executeWithRuntime(args, runtimeWithAuthTestOperations(
			openSecretsStore, authorizeGoogle, ensureKeychainAccess, fetchAuthorizedIdentity,
		))
	}

	ensureKeychainAccess = func(context.Context) error { return nil }

	store := newMemSecretsStore()
	openSecretsStore = func() (secrets.Store, error) { return store, nil }

	var gotOpts googleauth.AuthorizeOptions
	authorizeGoogle = func(ctx context.Context, opts googleauth.AuthorizeOptions) (string, error) {
		gotOpts = opts
		gotOpts.Services = append([]googleauth.Service(nil), opts.Services...)
		gotOpts.Scopes = append([]string(nil), opts.Scopes...)
		return "rt", nil
	}
	fetchAuthorizedIdentity = func(context.Context, string, string, []string, time.Duration) (googleauth.Identity, error) {
		return googleauth.Identity{Email: "user@example.com"}, nil
	}

	_ = captureStdout(t, func() {
		_ = captureStderr(t, func() {
			if err := execute([]string{
				"--json",
				"auth",
				"add",
				"user@example.com",
				"--services",
				"drive",
				"--drive-scope",
				"file",
			}); err != nil {
				t.Fatalf("Execute: %v", err)
			}
		})
	})

	if !containsStringInSlice(gotOpts.Scopes, "https://www.googleapis.com/auth/drive.file") {
		t.Fatalf("missing drive.file in %v", gotOpts.Scopes)
	}
	if containsStringInSlice(gotOpts.Scopes, "https://www.googleapis.com/auth/drive") {
		t.Fatalf("unexpected drive in %v", gotOpts.Scopes)
	}
}

func TestAuthAddCmd_ReadonlyWithDriveScopeFileRejected(t *testing.T) {
	err := Execute([]string{"auth", "add", "user@example.com", "--services", "drive", "--readonly", "--drive-scope", "file"})