Function TestRewritesNamespaceConfig

internal/driver/config/provider_test.go:193–274

Test that the namespaces can be configured through the Ory Permission Language.

(t *testing.T)

// Test that the namespaces can be configured through the Ory Permission
// Language.
func TestRewritesNamespaceConfig(t *testing.T) {
	oplContent := `
class User implements Namespace {
  related: {
    manager: User[]
  }
}
  
class Group implements Namespace {
  related: {
    members: (User | Group)[]
  }
}`

	oplConfigFile := createFile(t, oplContent)

	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
		_, err := w.Write([]byte(oplContent))
		if err != nil {
			t.Fatal(err)
		}
	}))
	t.Cleanup(func() { srv.Close() })

	cases := []struct {
		name                    string
		location                string
		disallowPrivateIPRanges bool
		expectErr               bool
	}{{
		name:     "local file",
		location: "file://" + oplConfigFile,
	}, {
		name:                    "HTTP url forbidden",
		location:                srv.URL,
		disallowPrivateIPRanges: true,
		expectErr:               true,
	}, {
		name:     "HTTP url allowed",
		location: srv.URL,
	}}

	for _, tc := range cases {
		t.Run("case="+tc.name, func(t *testing.T) {
			config := createFileF(t, `
dsn: memory
clients:
  http:
    disallow_private_ip_ranges: %v
namespaces:
  location: %s`, tc.disallowPrivateIPRanges, tc.location)

			_, p := setup(t, config)
			nm, err := p.NamespaceManager()
			if tc.expectErr {
				assert.Error(t, err)
				return
			}