1 // Copyright (C) The Arvados Authors. All rights reserved.
3 // SPDX-License-Identifier: AGPL-3.0
10 "git.arvados.org/arvados.git/lib/config"
11 "git.arvados.org/arvados.git/lib/controller/rpc"
12 "git.arvados.org/arvados.git/lib/ctrlctx"
13 "git.arvados.org/arvados.git/sdk/go/arvados"
14 "git.arvados.org/arvados.git/sdk/go/arvadostest"
15 "git.arvados.org/arvados.git/sdk/go/ctxlog"
16 "github.com/jmoiron/sqlx"
17 check "gopkg.in/check.v1"
20 var _ = check.Suite(&TestUserSuite{})
22 type TestUserSuite struct {
23 cluster *arvados.Cluster
24 ctrl *testLoginController
25 railsSpy *arvadostest.Proxy
28 // transaction context
33 func (s *TestUserSuite) SetUpSuite(c *check.C) {
34 cfg, err := config.NewLoader(nil, ctxlog.TestLogger(c)).Load()
35 c.Assert(err, check.IsNil)
36 s.cluster, err = cfg.GetCluster("")
37 c.Assert(err, check.IsNil)
38 s.cluster.Login.Test.Enable = true
39 s.cluster.Login.Test.Users = map[string]arvados.TestUser{
40 "valid": {Email: "valid@example.com", Password: "v@l1d"},
42 s.railsSpy = arvadostest.NewProxy(c, s.cluster.Services.RailsAPI)
43 s.ctrl = &testLoginController{
45 Parent: &Conn{railsProxy: rpc.NewConn(s.cluster.ClusterID, s.railsSpy.URL, true, rpc.PassthroughTokenProvider)},
47 s.db = arvadostest.DB(c, s.cluster)
50 func (s *TestUserSuite) SetUpTest(c *check.C) {
51 tx, err := s.db.Beginx()
52 c.Assert(err, check.IsNil)
53 s.ctx = ctrlctx.NewWithTransaction(context.Background(), tx)
54 s.rollback = tx.Rollback
57 func (s *TestUserSuite) TearDownTest(c *check.C) {
58 if s.rollback != nil {
63 func (s *TestUserSuite) TestLogin(c *check.C) {
64 for _, trial := range []struct {
69 {false, "foo", "bar"},
73 {true, "valid", "v@l1d"},
74 {true, "valid@example.com", "v@l1d"},
76 c.Logf("=== %#v", trial)
77 resp, err := s.ctrl.UserAuthenticate(s.ctx, arvados.UserAuthenticateOptions{
78 Username: trial.username,
79 Password: trial.password,
82 c.Check(err, check.IsNil)
83 c.Check(resp.APIToken, check.Not(check.Equals), "")
84 c.Check(resp.UUID, check.Matches, `zzzzz-gj3su-.*`)
85 c.Check(resp.Scopes, check.DeepEquals, []string{"all"})
87 authinfo := getCallbackAuthInfo(c, s.railsSpy)
88 c.Check(authinfo.Email, check.Equals, "valid@example.com")
89 c.Check(authinfo.AlternateEmails, check.DeepEquals, []string(nil))
91 c.Check(err, check.ErrorMatches, `authentication failed.*`)
96 func (s *TestUserSuite) TestLoginForm(c *check.C) {
97 resp, err := s.ctrl.Login(s.ctx, arvados.LoginOptions{
98 ReturnTo: "https://localhost:12345/example",
100 c.Check(err, check.IsNil)
101 c.Check(resp.HTML.String(), check.Matches, `(?ms).*<form method="POST".*`)
102 c.Check(resp.HTML.String(), check.Matches, `(?ms).*<input id="return_to" type="hidden" name="return_to" value="https://localhost:12345/example">.*`)