Function TestUserOIDCClaims

cli/useroidcclaims_test.go:21–161

(t *testing.T)

)

func TestUserOIDCClaims(t *testing.T) {
	t.Parallel()

	newOIDCTest := func(t *testing.T) (*oidctest.FakeIDP, *codersdk.Client) {
		t.Helper()

		fake := oidctest.NewFakeIDP(t,
			oidctest.WithServing(),
		)
		cfg := fake.OIDCConfig(t, nil, func(cfg *coderd.OIDCConfig) {
			cfg.AllowSignups = true
		})
		ownerClient := coderdtest.New(t, &coderdtest.Options{
			OIDCConfig: cfg,
		})
		return fake, ownerClient
	}

	t.Run("OwnClaims", func(t *testing.T) {
		t.Parallel()

		fake, ownerClient := newOIDCTest(t)
		claims := jwt.MapClaims{
			"email":          "alice@coder.com",
			"email_verified": true,
			"sub":            uuid.NewString(),
			"groups":         []string{"admin", "eng"},
		}
		userClient, loginResp := fake.Login(t, ownerClient, claims)
		defer loginResp.Body.Close()

		inv, root := clitest.New(t, "users", "oidc-claims", "-o", "json")
		clitest.SetupConfig(t, userClient, root)

		buf := bytes.NewBuffer(nil)
		inv.Stdout = buf
		err := inv.WithContext(testutil.Context(t, testutil.WaitMedium)).Run()
		require.NoError(t, err)

		var resp codersdk.OIDCClaimsResponse
		err = json.Unmarshal(buf.Bytes(), &resp)
		require.NoError(t, err, "unmarshal JSON output")
		require.NotEmpty(t, resp.Claims, "claims should not be empty")
		assert.Equal(t, "alice@coder.com", resp.Claims["email"])
	})

	t.Run("Table", func(t *testing.T) {
		t.Parallel()

		fake, ownerClient := newOIDCTest(t)
		claims := jwt.MapClaims{
			"email":          "bob@coder.com",
			"email_verified": true,
			"sub":            uuid.NewString(),
		}
		userClient, loginResp := fake.Login(t, ownerClient, claims)
		defer loginResp.Body.Close()