Function newSAMLTestAPI

internal/api/saml_test.go:68–87

newSAMLTestAPI builds a minimal API with SAML enabled using the given key(s).

(t *tst.T, primaryKey, nextKey string, allowEncrypted bool)

// newSAMLTestAPI builds a minimal API with SAML enabled using the given key(s).
func newSAMLTestAPI(t *tst.T, primaryKey, nextKey string, allowEncrypted bool) (*API, error) {
	t.Helper()
	config, err := confload.LoadGlobal(apiTestConfig)
	if err != nil {
		return nil, err
	}
	config.API.ExternalURL = "https://projectref.supabase.co/auth/v1/"
	config.API.MaxRequestDuration = 5 * time.Second
	config.SAML.Enabled = true
	config.SAML.PrivateKey = primaryKey
	config.SAML.PrivateKeyNext = nextKey
	config.SAML.AllowEncryptedAssertions = allowEncrypted
	if err := config.ApplyDefaults(); err != nil {
		return nil, err
	}
	if err := config.SAML.PopulateFields(config.API.ExternalURL); err != nil {
		return nil, err
	}
	return NewAPI(config, nil), nil
}

// samlMetadataRequest issues a GET /sso/saml/metadata and parses the response.
func samlMetadataRequest(t *tst.T, api *API) (*saml.EntityDescriptor, http.Header) {