Function TestExternalAuthManagement

coderd/externalauth_test.go:176–334

TestExternalAuthManagement is for testing the apis interacting with external auths from the user perspective. We assume the external auth will always work, so we can test the managing apis like unlinking and listing.

(t *testing.T)

// will always work, so we can test the managing apis like unlinking and
// listing.
func TestExternalAuthManagement(t *testing.T) {
	t.Parallel()
	t.Run("ListProviders", func(t *testing.T) {
		t.Parallel()
		const githubID = "fake-github"
		const gitlabID = "fake-gitlab"
		const slackID = "fake-slack"
		const azureID = "fake-azure"
		ghRevokeCalled := false
		slRevokeCalled := false
		azRevokeCalled := false

		ghRevoke := func() (int, error) {
			ghRevokeCalled = true
			return http.StatusNoContent, nil
		}
		slRevoke := func() (int, error) {
			slRevokeCalled = true
			return http.StatusOK, nil
		}
		azRevoke := func() (int, error) {
			azRevokeCalled = true
			return http.StatusForbidden, xerrors.New("some error")
		}

		github := oidctest.NewFakeIDP(t, oidctest.WithServing(), oidctest.WithRevokeTokenGitHub(ghRevoke))
		gitlab := oidctest.NewFakeIDP(t, oidctest.WithServing())
		slack := oidctest.NewFakeIDP(t, oidctest.WithServing(), oidctest.WithRevokeTokenRFC(slRevoke))
		azure := oidctest.NewFakeIDP(t, oidctest.WithServing(), oidctest.WithRevokeTokenRFC(azRevoke))

		owner := coderdtest.New(t, &coderdtest.Options{
			ExternalAuthConfigs: []*externalauth.Config{
				github.ExternalAuthConfig(t, githubID, nil, func(cfg *externalauth.Config) {
					cfg.Type = codersdk.EnhancedExternalAuthProviderGitHub.String()
				}),
				gitlab.ExternalAuthConfig(t, gitlabID, nil, func(cfg *externalauth.Config) {
					cfg.Type = codersdk.EnhancedExternalAuthProviderGitLab.String()
				}),
				slack.ExternalAuthConfig(t, slackID, nil, func(cfg *externalauth.Config) {
					cfg.Type = codersdk.EnhancedExternalAuthProviderSlack.String()
					cfg.RevokeURL = ""
				}),
				azure.ExternalAuthConfig(t, azureID, nil, func(cfg *externalauth.Config) {
					cfg.Type = codersdk.EnhancedExternalAuthProviderAzureDevopsEntra.String()
				}),
			},
		})
		ownerUser := coderdtest.CreateFirstUser(t, owner)
		// Just a regular user
		client, _ := coderdtest.CreateAnotherUser(t, owner, ownerUser.OrganizationID)
		ctx := testutil.Context(t, testutil.WaitLong)

		// List auths without any links.
		list, err := client.ListExternalAuths(ctx)
		require.NoError(t, err)
		require.Len(t, list.Providers, 4)
		require.Len(t, list.Links, 0)