Function TestPluginUnsetsEnvVar

policy/plugins/plugins_test.go:385–419

(t *testing.T)

}

func TestPluginUnsetsEnvVar(t *testing.T) {
	mockFs := afero.NewMemMapFs()
	tempDir, _ := afero.TempDir(mockFs, "", "policy_test")

	enforcer := &PolicyPluginEnforcer{
		Fs: mockFs,
		cmdExecutor: func(name string, arg ...string) ([]byte, error) {
			_, okTestValue := os.LookupEnv("OPKSSH_PLUGIN_TESTVALUE")
			issValue, okIss := os.LookupEnv("OPKSSH_PLUGIN_ISS")
			require.False(t, okTestValue, "OPKSSH_PLUGIN_TESTVALUE should have been unset before calling the command")
			require.True(t, okIss, "OPKSSH_PLUGIN_ISS should still be set before calling the command")
			require.Equal(t, issValue, "https://example.com")
			return []byte("allow"), nil
		},
		permChecker: files.PermsChecker{
			Fs: mockFs,
			CmdRunner: func(name string, arg ...string) ([]byte, error) {
				return []byte("root" + " " + "group"), nil
			},
		},
	}

	// Write test config plugins files
	err := afero.WriteFile(mockFs, filepath.Join(tempDir, "policy.yml"), []byte(`
name: Example Policy Command
enforce_providers: true
command: /usr/bin/local/opk/policy-cmd arg1 arg2 arg3`), 0640)
	require.NoError(t, err)

	os.Setenv("OPKSSH_PLUGIN_TESTVALUE", "testvalue")
	os.Setenv("OPKSSH_PLUGIN_ISS", "should be overwritten")
	res, err := enforcer.checkPolicies(tempDir, map[string]string{"OPKSSH_PLUGIN_ISS": "https://example.com"})
	require.NoError(t, err)
	require.NotNil(t, res)
}

func TestPublicCheckPolicy(t *testing.T) {
	mockFs := afero.NewMemMapFs()