|
1
|
|
|
package credentials |
|
2
|
|
|
|
|
3
|
|
|
import ( |
|
4
|
|
|
"errors" |
|
5
|
|
|
"net/http" |
|
6
|
|
|
"os" |
|
7
|
|
|
"testing" |
|
8
|
|
|
|
|
9
|
|
|
"github.com/stretchr/testify/assert" |
|
10
|
|
|
) |
|
11
|
|
|
|
|
12
|
|
|
func Test_oidcCredential_updateCredential(t *testing.T) { |
|
13
|
|
|
oidcCredential := newOIDCRoleArnCredential("accessKeyId", "accessKeySecret", "RoleArn", "OIDCProviderArn", "tokenFilePath", "roleSessionName", "Policy", 3600, nil) |
|
14
|
|
|
hookDo = func(fn func(req *http.Request) (*http.Response, error)) func(req *http.Request) (*http.Response, error) { |
|
15
|
|
|
return func(req *http.Request) (*http.Response, error) { |
|
16
|
|
|
return mockResponse(300, ``, errors.New("sdk test")) |
|
17
|
|
|
} |
|
18
|
|
|
} |
|
19
|
|
|
accesskeyId, err := oidcCredential.GetAccessKeyId() |
|
20
|
|
|
assert.NotNil(t, err) |
|
21
|
|
|
assert.Equal(t, "refresh RoleArn sts token err: sdk test", err.Error()) |
|
22
|
|
|
assert.Equal(t, "", *accesskeyId) |
|
23
|
|
|
|
|
24
|
|
|
assert.Equal(t, "oidc_role_arn", *oidcCredential.GetType()) |
|
25
|
|
|
|
|
26
|
|
|
hookDo = func(fn func(req *http.Request) (*http.Response, error)) func(req *http.Request) (*http.Response, error) { |
|
27
|
|
|
return func(req *http.Request) (*http.Response, error) { |
|
28
|
|
|
return mockResponse(200, `{"Credentials":{"AccessKeyId":"accessKeyId","AccessKeySecret":"accessKeySecret","SecurityToken":"securitytoken","Expiration":"2020-01-02T15:04:05Z"}}`, nil) |
|
29
|
|
|
} |
|
30
|
|
|
} |
|
31
|
|
|
accesskeyId, err = oidcCredential.GetAccessKeyId() |
|
32
|
|
|
assert.Nil(t, err) |
|
33
|
|
|
assert.Equal(t, "accessKeyId", *accesskeyId) |
|
34
|
|
|
|
|
35
|
|
|
accesskeySecret, err := oidcCredential.GetAccessKeySecret() |
|
36
|
|
|
assert.Nil(t, err) |
|
37
|
|
|
assert.Equal(t, "accessKeySecret", *accesskeySecret) |
|
38
|
|
|
|
|
39
|
|
|
ststoken, err := oidcCredential.GetSecurityToken() |
|
40
|
|
|
assert.Nil(t, err) |
|
41
|
|
|
assert.Equal(t, "securitytoken", *ststoken) |
|
42
|
|
|
|
|
43
|
|
|
os.Setenv("ALIBABA_CLOUD_OIDC_TOKEN_FILE", "") |
|
44
|
|
|
token := oidcCredential.GetOIDCToken("/test") |
|
45
|
|
|
assert.Nil(t, token) |
|
46
|
|
|
path, _ := os.Getwd() |
|
47
|
|
|
os.Setenv("ALIBABA_CLOUD_OIDC_TOKEN_FILE", path+"/oidc_token") |
|
48
|
|
|
token = oidcCredential.GetOIDCToken("/test") |
|
49
|
|
|
assert.Equal(t, "test_long_oidc_token_eyJhbGciOiJSUzI1NiIsImtpZCI6ImFQaXlpNEVGSU8wWnlGcFh1V0psQUNWbklZVlJsUkNmM2tlSzNMUlhWT1UifQ.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.XGP-wgLj-iMiAHjLe0lZLh7y48Qsj9HzsEbNh706WwerBoxnssdsyGFb9lzd2FyM8CssbAOCstr7OuAMWNdJmDZgpiOGGSbQ-KXXmbfnIS4ix-V3pQF6LVBFr7xJlj20J6YY89um3rv_04t0iCGxKWs2ZMUyU1FbZpIPRep24LVKbUz1saiiVGgDBTIZdHA13Z-jUvYAnsxK_Kj5tc1K-IuQQU0IwSKJh5OShMcdPugMV5LwTL3ogCikfB7yljq5vclBhCeF2lXLIibvwF711TOhuJ5lMlh-a2KkIgwBHhANg_U9k4Mt_VadctfUGc4hxlSbBD0w9o9mDGKwgGmW5Q", *token) |
|
50
|
|
|
os.Setenv("ALIBABA_CLOUD_OIDC_TOKEN_FILE", "") |
|
51
|
|
|
token = oidcCredential.GetOIDCToken(path + "/oidc_token") |
|
52
|
|
|
assert.Equal(t, 1027, len(*token)) |
|
53
|
|
|
assert.Equal(t, "test_long_oidc_token_eyJhbGciOiJSUzI1NiIsImtpZCI6ImFQaXlpNEVGSU8wWnlGcFh1V0psQUNWbklZVlJsUkNmM2tlSzNMUlhWT1UifQ.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.XGP-wgLj-iMiAHjLe0lZLh7y48Qsj9HzsEbNh706WwerBoxnssdsyGFb9lzd2FyM8CssbAOCstr7OuAMWNdJmDZgpiOGGSbQ-KXXmbfnIS4ix-V3pQF6LVBFr7xJlj20J6YY89um3rv_04t0iCGxKWs2ZMUyU1FbZpIPRep24LVKbUz1saiiVGgDBTIZdHA13Z-jUvYAnsxK_Kj5tc1K-IuQQU0IwSKJh5OShMcdPugMV5LwTL3ogCikfB7yljq5vclBhCeF2lXLIibvwF711TOhuJ5lMlh-a2KkIgwBHhANg_U9k4Mt_VadctfUGc4hxlSbBD0w9o9mDGKwgGmW5Q", *token) |
|
54
|
|
|
} |
|
55
|
|
|
|
aliyun /
credentials-go
