Function TestServeHTTP_DelegatedAPIKey_Integration

coderd/aibridged/aibridged_test.go:369–405

End-to-end: a real transport factory wired to a real server. Verifies the delegated key ID survives the in-memory round-trip and is treated as the authoritative caller identity by the handler, without any HTTP-layer header extraction.

(t *testing.T)

// authoritative caller identity by the handler, without any HTTP-layer header
// extraction.
func TestServeHTTP_DelegatedAPIKey_Integration(t *testing.T) {
	t.Parallel()

	const testKeyID = "abcdef1234"

	srv, client, pool := newTestServer(t)
	conn := &mockDRPCConn{}
	client.EXPECT().DRPCConn().AnyTimes().Return(conn)
	mockH := &mockHandler{}

	client.EXPECT().IsAuthorized(gomock.Any(), gomock.Any()).DoAndReturn(
		func(_ context.Context, in *proto.IsAuthorizedRequest) (*proto.IsAuthorizedResponse, error) {
			assert.Equal(t, testKeyID, in.GetKeyId())
			assert.Empty(t, in.GetKey())
			return &proto.IsAuthorizedResponse{
				OwnerId:  uuid.NewString(),
				ApiKeyId: testKeyID,
				Username: "u",
			}, nil
		})
	pool.EXPECT().Acquire(gomock.Any(), gomock.Any(), gomock.Any(), gomock.Any()).Return(mockH, nil)

	factory := aibridged.NewTransportFactory(srv)
	rt, err := factory.TransportFor("openai", agplaibridge.SourceAgents)
	require.NoError(t, err)

	ctx := agplaibridge.WithDelegatedAPIKeyID(testutil.Context(t, testutil.WaitShort), testKeyID)
	req, err := http.NewRequestWithContext(ctx, http.MethodPost, "http://aibridge/openai/v1/chat/completions", nil)
	require.NoError(t, err)

	resp, err := rt.RoundTrip(req)
	require.NoError(t, err)
	defer resp.Body.Close()

	require.Equal(t, http.StatusOK, resp.StatusCode)
	require.NotNil(t, mockH.headersReceived, "downstream handler must observe the delegated request")
}

func TestServeHTTP_StripCoderToken(t *testing.T) {
	t.Parallel()