Function TestFixOIDCLinks

cli/server_fix_oidc_links_test.go:38–203

(t *testing.T)

}

func TestFixOIDCLinks(t *testing.T) {
	t.Parallel()

	t.Run("DryRun", func(t *testing.T) {
		t.Parallel()

		ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitMedium)
		t.Cleanup(cancel)

		const expectedIssuer = "https://accounts.google.com"
		oidcSrv := fakeOIDCDiscovery(t, expectedIssuer)

		connectionURL, err := dbtestutil.Open(t)
		require.NoError(t, err)

		sqlDB, err := sql.Open("postgres", connectionURL)
		require.NoError(t, err)
		defer sqlDB.Close()

		db := database.New(sqlDB)

		// Seed a correctly linked user.
		correctUser := dbgen.User(t, db, database.User{LoginType: database.LoginTypeOIDC})
		dbgen.UserLink(t, db, database.UserLink{
			UserID:    correctUser.ID,
			LoginType: database.LoginTypeOIDC,
			LinkedID:  expectedIssuer + "||sub-correct",
		})

		// Seed a mismatched user.
		mismatchedUser := dbgen.User(t, db, database.User{LoginType: database.LoginTypeOIDC})
		dbgen.UserLink(t, db, database.UserLink{
			UserID:    mismatchedUser.ID,
			LoginType: database.LoginTypeOIDC,
			LinkedID:  "https://old-issuer.example.com||sub-mismatched",
		})

		inv, _ := clitest.New(t,
			"server", "fix-oidc-links",
			"--postgres-url", connectionURL,
			"--issuer-url", oidcSrv.URL,
			"--dry-run",
		)

		stdout := expecter.NewAttachedToInvocation(t, inv)
		w := clitest.StartWithWaiter(t, inv)

		stdout.ExpectMatch(ctx, "Resolved OIDC issuer: \""+expectedIssuer+"\"")
		stdout.ExpectMatch(ctx, "Total OIDC users:")
		stdout.ExpectMatch(ctx, "Correctly linked:")
		stdout.ExpectMatch(ctx, "Linked to other issuers:")
		w.RequireSuccess()

		// Verify no changes were made.
		link, err := db.GetUserLinkByUserIDLoginType(ctx, database.GetUserLinkByUserIDLoginTypeParams{
			UserID:    mismatchedUser.ID,
			LoginType: database.LoginTypeOIDC,
		})