Merge pull request #114 from JaurbanRH/context

Add tests for authorino context

testsuite/tests/kuadrant/authorino/identity/anonymous/test_anonymous_context.py

@@ -0,0 +1,24 @@
+"""Test for anonymous identity context"""
+import json
+
+import pytest
+
+
+@pytest.fixture(scope="module")
+def authorization(authorization):
+    """Setup AuthConfig for test"""
+    authorization.add_anonymous_identity("anonymous")
+    authorization.add_response({"name": "auth-json", "json": {
+        "properties": [{"name": "auth", "valueFrom": {"authJSON": "auth.identity.anonymous"}}]}})
+    return authorization
+
+
+def test_anonymous_context(client):
+    """
+    Test:
+        - Make request without authentication
+        - Assert that response has the right information in context
+    """
+    response = client.get("/get")
+    assert json.loads(response.json()["headers"]["Auth-Json"])["auth"]
+    assert response.status_code == 200

testsuite/tests/kuadrant/authorino/identity/api_key/test_api_key_context.py

@@ -0,0 +1,27 @@
+"""Test for API key identity context"""
+import json
+
+import pytest
+
+
+@pytest.fixture(scope="module")
+def authorization(authorization, module_label):
+    """Setup AuthConfig for test"""
+    authorization.add_api_key_identity("api_key", match_label=module_label)
+    authorization.add_response({"name": "auth-json", "json": {
+        "properties": [{"name": "auth", "valueFrom": {"authJSON": "auth.identity"}}]}})
+    return authorization
+
+
+def tests_api_key_context(client, auth, api_key, module_label, testconfig):
+    """
+    Test:
+        - Make request with API key authentication
+        - Assert that response has the right information in context
+    """
+    response = client.get("get", auth=auth)
+    assert response.status_code == 200
+    identity = json.loads(response.json()["headers"]["Auth-Json"])["auth"]
+    assert identity['data']['api_key'] == api_key.model.data.api_key
+    assert identity["metadata"]["namespace"] == testconfig["openshift"].project
+    assert identity["metadata"]["labels"]["group"] == module_label

testsuite/tests/kuadrant/authorino/identity/rhsso/conftest.py

@@ -13,3 +13,9 @@ def authorization(authorization, rhsso):
     """Add RHSSO identity to AuthConfig"""
     authorization.add_oidc_identity("rhsso", rhsso.well_known["issuer"])
     return authorization
+
+
+@pytest.fixture(scope="module")
+def realm_role(rhsso, blame):
+    """Creates new realm role"""
+    return rhsso.realm.create_realm_role(blame("role"))

testsuite/tests/kuadrant/authorino/identity/rhsso/test_rhsso_context.py

@@ -0,0 +1,41 @@
+"""Test for RHSSO identity context"""
+import json
+import time
+
+import pytest
+
+
+@pytest.fixture(scope="module")
+def authorization(authorization):
+    """Setup AuthConfig for test"""
+    authorization.add_response({"name": "auth-json", "json": {
+        "properties": [{"name": "auth", "valueFrom": {"authJSON": "auth.identity"}},
+                       {"name": "context", "valueFrom": {"authJSON": "context.request.http.headers.authorization"}}]}})
+    return authorization
+
+
+@pytest.fixture(scope="module")
+def realm_role(rhsso, realm_role):
+    """Add realm role to rhsso user"""
+    rhsso.realm.assign_realm_role(realm_role, rhsso.user)
+    return realm_role
+
+
+def tests_rhsso_context(client, auth, rhsso, realm_role):
+    """
+    Test:
+        - Make request with RHSSO authentication
+        - Assert that response has the right information in context
+    """
+    response = client.get("get", auth=auth)
+    assert response.status_code == 200
+    auth_json = json.loads(response.json()["headers"]["Auth-Json"])
+    identity = auth_json["auth"]
+    now = time.time()
+    assert rhsso.well_known["issuer"] == identity["iss"]
+    assert identity["azp"] == rhsso.client_name
+    assert float(identity["exp"]) > now
+    assert float(identity["iat"]) <= now
+    assert auth_json["context"] == f"Bearer {auth.token.access_token}"
+    assert realm_role["name"] in identity["realm_access"]["roles"]
+    assert identity['email'] == rhsso.client.admin.get_user(rhsso.user)["email"]

testsuite/tests/kuadrant/authorino/identity/rhsso/test_rhsso_roles.py

@@ -13,12 +13,6 @@ def user_with_role(rhsso, realm_role, blame):
     return {"id": user_id, "username": username, "password": password}
 
 
-@pytest.fixture(scope="module")
-def realm_role(rhsso, blame):
-    """Creates new realm role"""
-    return rhsso.realm.create_realm_role(blame("role"))
-
-
 @pytest.fixture(scope="module")
 def authorization(authorization, realm_role, blame):
     """Adds rule, that requires user to be part of realm_role to be allowed access."""