Function TestAnalyzeOIDCLinks

coderd/authlink/authlink_test.go:18–165

(t *testing.T)

)

func TestAnalyzeOIDCLinks(t *testing.T) {
	t.Parallel()

	t.Run("MixedIssuers", func(t *testing.T) {
		t.Parallel()
		ctx := testutil.Context(t, testutil.WaitShort)

		db, _ := dbtestutil.NewDB(t)
		const expectedIssuer = "https://accounts.google.com"

		// 3 users linked to the expected issuer.
		for i := 0; i < 3; i++ {
			user := dbgen.User(t, db, database.User{LoginType: database.LoginTypeOIDC})
			dbgen.UserLink(t, db, database.UserLink{
				UserID:    user.ID,
				LoginType: database.LoginTypeOIDC,
				LinkedID:  expectedIssuer + "||sub-" + user.ID.String(),
			})
		}

		// 2 users linked to an old issuer.
		for i := 0; i < 2; i++ {
			user := dbgen.User(t, db, database.User{LoginType: database.LoginTypeOIDC})
			dbgen.UserLink(t, db, database.UserLink{
				UserID:    user.ID,
				LoginType: database.LoginTypeOIDC,
				LinkedID:  "https://old-issuer.example.com||sub-" + user.ID.String(),
			})
		}

		// 1 user linked to another old issuer.
		user := dbgen.User(t, db, database.User{LoginType: database.LoginTypeOIDC})
		dbgen.UserLink(t, db, database.UserLink{
			UserID:    user.ID,
			LoginType: database.LoginTypeOIDC,
			LinkedID:  "https://staging.example.com||sub-" + user.ID.String(),
		})

		// 1 unlinked user (empty linked_id).
		unlinkedUser := dbgen.User(t, db, database.User{LoginType: database.LoginTypeOIDC})
		dbgen.UserLink(t, db, database.UserLink{
			UserID:    unlinkedUser.ID,
			LoginType: database.LoginTypeOIDC,
			LinkedID:  "",
		})

		analysis, err := authlink.AnalyzeOIDCLinks(ctx, db, expectedIssuer)
		require.NoError(t, err)

		require.Equal(t, 7, analysis.Total)
		require.Equal(t, 3, analysis.CorrectIssuer)
		require.Equal(t, 1, analysis.Unlinked)
		require.Equal(t, 3, analysis.MismatchedTotal())
		require.Equal(t, 2, analysis.MismatchedCounts["https://old-issuer.example.com"])
		require.Equal(t, 1, analysis.MismatchedCounts["https://staging.example.com"])
	})

	t.Run("NoOIDCUsers", func(t *testing.T) {