Function TestGetCryptoKeys

enterprise/coderd/workspaceproxy_test.go:995–1136

(t *testing.T)

}

func TestGetCryptoKeys(t *testing.T) {
	t.Parallel()

	t.Run("OK", func(t *testing.T) {
		t.Parallel()

		ctx := testutil.Context(t, testutil.WaitMedium)
		db, pubsub := dbtestutil.NewDB(t)
		cclient, _, api, _ := coderdenttest.NewWithAPI(t, &coderdenttest.Options{
			Options: &coderdtest.Options{
				Database:                 db,
				Pubsub:                   pubsub,
				IncludeProvisionerDaemon: true,
			},
			LicenseOptions: &coderdenttest.LicenseOptions{
				Features: license.Features{
					codersdk.FeatureWorkspaceProxy: 1,
				},
			},
		})

		now := time.Now()

		expectedKey1 := dbgen.CryptoKey(t, db, database.CryptoKey{
			Feature:  database.CryptoKeyFeatureWorkspaceAppsAPIKey,
			StartsAt: now.Add(-time.Hour),
			Sequence: 2,
		})
		encryptionKey := db2sdk.CryptoKey(expectedKey1)

		expectedKey2 := dbgen.CryptoKey(t, db, database.CryptoKey{
			Feature:  database.CryptoKeyFeatureWorkspaceAppsToken,
			StartsAt: now,
			Sequence: 3,
		})
		signingKey := db2sdk.CryptoKey(expectedKey2)

		// Create a deleted key.
		_ = dbgen.CryptoKey(t, db, database.CryptoKey{
			Feature:  database.CryptoKeyFeatureWorkspaceAppsAPIKey,
			StartsAt: now.Add(-time.Hour),
			Secret: sql.NullString{
				String: "secret1",
				Valid:  false,
			},
			Sequence: 4,
		})

		proxy := coderdenttest.NewWorkspaceProxyReplica(t, api, cclient, &coderdenttest.ProxyOptions{
			Name: testutil.GetRandomName(t),
		})

		keys, err := proxy.SDKClient.CryptoKeys(ctx, codersdk.CryptoKeyFeatureWorkspaceAppsAPIKey)
		require.NoError(t, err)
		require.NotEmpty(t, keys)
		// 1 key is generated on startup, the other we manually generated.
		require.Equal(t, 2, len(keys.CryptoKeys))
		requireContainsKeys(t, keys.CryptoKeys, encryptionKey)