Function TestUserSecretsCRUDOperations

coderd/database/querier_test.go:8094–8246

(t *testing.T)

}

func TestUserSecretsCRUDOperations(t *testing.T) {
	t.Parallel()

	// Use raw database without dbauthz wrapper for this test
	db, _ := dbtestutil.NewDB(t)

	t.Run("FullCRUDWorkflow", func(t *testing.T) {
		t.Parallel()
		ctx := testutil.Context(t, testutil.WaitMedium)

		// Create a new user for this test
		testUser := dbgen.User(t, db, database.User{})

		// 1. CREATE
		secretID := uuid.New()
		createParams := database.CreateUserSecretParams{
			ID:          secretID,
			UserID:      testUser.ID,
			Name:        "workflow-secret",
			Description: "Secret for full CRUD workflow",
			Value:       "workflow-value",
			EnvName:     "WORKFLOW_ENV",
			FilePath:    "/workflow/path",
		}

		createdSecret, err := db.CreateUserSecret(ctx, createParams)
		require.NoError(t, err)
		assert.Equal(t, secretID, createdSecret.ID)

		// 2. READ by UserID and Name
		readByNameParams := database.GetUserSecretByUserIDAndNameParams{
			UserID: testUser.ID,
			Name:   "workflow-secret",
		}
		readByNameSecret, err := db.GetUserSecretByUserIDAndName(ctx, readByNameParams)
		require.NoError(t, err)
		assert.Equal(t, createdSecret.ID, readByNameSecret.ID)
		assert.Equal(t, "workflow-secret", readByNameSecret.Name)

		// 3. LIST (metadata only)
		secrets, err := db.ListUserSecrets(ctx, testUser.ID)
		require.NoError(t, err)
		require.Len(t, secrets, 1)
		assert.Equal(t, createdSecret.ID, secrets[0].ID)

		// 4. LIST with values
		secretsWithValues, err := db.ListUserSecretsWithValues(ctx, testUser.ID)
		require.NoError(t, err)
		require.Len(t, secretsWithValues, 1)
		assert.Equal(t, "workflow-value", secretsWithValues[0].Value)

		// 5. UPDATE (partial - only description)
		updateParams := database.UpdateUserSecretByUserIDAndNameParams{
			UserID:            testUser.ID,
			Name:              "workflow-secret",
			UpdateDescription: true,
			Description:       "Updated workflow description",
		}