33 lines
1.6 KiB
Python
33 lines
1.6 KiB
Python
import unittest
|
|
|
|
from reconcile_authelia import merge
|
|
|
|
|
|
class MergeTests(unittest.TestCase):
|
|
def test_preserves_unrelated_state_and_converges(self):
|
|
before = {'configMap': {'identity_providers': {'oidc': {
|
|
'clients': [{'client_id': 'hydra', 'client_secret': 'test-only'}],
|
|
'claims_policies': {'existing': {'id_token': ['email']}},
|
|
'authorization_policies': {'existing': {'default_policy': 'two_factor'}},
|
|
}}}}
|
|
desired = {'clients': [{'client_id': 'incus', 'public': True}],
|
|
'authorization_policies': {'incus_admin': {'default_policy': 'deny'}}}
|
|
after = merge(before, desired)
|
|
oidc = after['configMap']['identity_providers']['oidc']
|
|
self.assertEqual(oidc['clients'][0], before['configMap']['identity_providers']['oidc']['clients'][0])
|
|
self.assertIn('existing', oidc['claims_policies'])
|
|
self.assertIn('existing', oidc['authorization_policies'])
|
|
self.assertEqual(len(before['configMap']['identity_providers']['oidc']['clients']), 1)
|
|
self.assertEqual(merge(after, desired), after)
|
|
desired['clients'][0]['public'] = False
|
|
self.assertFalse(merge(after, desired)['configMap']['identity_providers']['oidc']['clients'][1]['public'])
|
|
|
|
def test_rejects_duplicate_identity(self):
|
|
before = {'configMap': {'identity_providers': {'oidc': {'clients': [{'client_id': 'incus'}, {'client_id': 'incus'}]}}}}
|
|
with self.assertRaises(ValueError):
|
|
merge(before, {'clients': [{'client_id': 'incus'}], 'authorization_policies': {}})
|
|
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main()
|