mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-20 14:34:25 +00:00
791d0587aa
# Which Problems Are Solved The payload in actions V2 is currently sent as JSON to the target endpoint. It might get exposed to intermediary infrastructure or logging systems. For these scenarios there needs to be an application-layer encryption, where the provider of the endpoint can define an key to be used for the encryption. # How the Problems Are Solved - Added an additional option to the target to specify the payload type: `JSON` (current and default), `JWT`, `JWE` (api and console) - added endpoints to upload and manage public keys (to be used for encryption) for a target - updated all action v2 executions (interceptors, oidc, saml, ...) to provide the `GetActiveSigningWebKey` from queries - implemented jwt and jwe in the exections incl. refactoring of code and tests - changes to the authn_keys table: - added a `fingerprint` column - dropped not null constraint on expiration - moved the `GetSignerOnce` into its own package to prevent circular dependencies # Additional Changes None # Additional Context closes #11061 --------- Co-authored-by: Marco A. <[email protected]> Co-authored-by: conblem <[email protected]> Co-authored-by: Silvan <[email protected]>
685 lines
19 KiB
Go
685 lines
19 KiB
Go
package projection
|
|
|
|
import (
|
|
"database/sql"
|
|
"testing"
|
|
|
|
"github.com/zitadel/zitadel/internal/domain"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/eventstore/handler/v2"
|
|
"github.com/zitadel/zitadel/internal/repository/instance"
|
|
"github.com/zitadel/zitadel/internal/repository/org"
|
|
"github.com/zitadel/zitadel/internal/repository/project"
|
|
"github.com/zitadel/zitadel/internal/repository/target"
|
|
"github.com/zitadel/zitadel/internal/repository/user"
|
|
"github.com/zitadel/zitadel/internal/zerrors"
|
|
)
|
|
|
|
func TestAuthNKeyProjection_reduces(t *testing.T) {
|
|
type args struct {
|
|
event func(t *testing.T) eventstore.Event
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
args args
|
|
reduce func(event eventstore.Event) (*handler.Statement, error)
|
|
want wantReduce
|
|
}{
|
|
{
|
|
name: "reduceAuthNKeyAdded app",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.ApplicationKeyAddedEventType,
|
|
project.AggregateType,
|
|
[]byte(`{"applicationId": "appId", "clientId":"clientId","keyId": "keyId", "type": 1, "expirationDate": "2021-11-30T15:00:00Z", "publicKey": "cHVibGljS2V5"}`),
|
|
), project.ApplicationKeyAddedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyAdded,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "INSERT INTO projections.authn_keys2 (id, creation_date, change_date, resource_owner, instance_id, aggregate_id, sequence, object_id, expiration, identifier, public_key, type, fingerprint, enabled) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
anyArg{},
|
|
anyArg{},
|
|
"ro-id",
|
|
"instance-id",
|
|
"agg-id",
|
|
uint64(15),
|
|
"appId",
|
|
anyArg{},
|
|
"clientId",
|
|
[]byte("publicKey"),
|
|
domain.AuthNKeyTypeJSON,
|
|
sql.NullString{}, // fingerprint is not set for apps
|
|
true, // apps keys are enabled by default
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyAdded user",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
user.MachineKeyAddedEventType,
|
|
user.AggregateType,
|
|
[]byte(`{"keyId": "keyId", "type": 1, "expirationDate": "2021-11-30T15:00:00Z", "publicKey": "cHVibGljS2V5"}`),
|
|
), user.MachineKeyAddedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyAdded,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("user"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "INSERT INTO projections.authn_keys2 (id, creation_date, change_date, resource_owner, instance_id, aggregate_id, sequence, object_id, expiration, identifier, public_key, type, fingerprint, enabled) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
anyArg{},
|
|
anyArg{},
|
|
"ro-id",
|
|
"instance-id",
|
|
"agg-id",
|
|
uint64(15),
|
|
"agg-id",
|
|
anyArg{},
|
|
"agg-id",
|
|
[]byte("publicKey"),
|
|
domain.AuthNKeyTypeJSON,
|
|
sql.NullString{}, // fingerprint is not set for users
|
|
true, // user keys are enabled by default
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyAdded target",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
target.KeyAddedEventType,
|
|
target.AggregateType,
|
|
[]byte(`{"keyId": "keyId", "expirationDate": "2021-11-30T15:00:00Z", "publicKey": "cHVibGljS2V5", "fingerprint": "fingerprint"}`),
|
|
), eventstore.GenericEventMapper[target.KeyAddedEvent]),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyAdded,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("target"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "INSERT INTO projections.authn_keys2 (id, creation_date, change_date, resource_owner, instance_id, aggregate_id, sequence, object_id, expiration, identifier, public_key, type, fingerprint, enabled) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
anyArg{},
|
|
anyArg{},
|
|
"ro-id",
|
|
"instance-id",
|
|
"agg-id",
|
|
uint64(15),
|
|
"agg-id",
|
|
anyArg{},
|
|
"agg-id",
|
|
[]byte("publicKey"),
|
|
domain.AuthNKeyTypeNONE,
|
|
sql.NullString{String: "fingerprint", Valid: true},
|
|
false, // target keys are disabled by default
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved app key",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.ApplicationKeyRemovedEventType,
|
|
project.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), project.ApplicationKeyRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyEnabledChanged api no change",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.APIConfigChangedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId"}`),
|
|
), project.APIConfigChangedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyEnabledChanged,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyEnabledChanged api config basic",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.APIConfigChangedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId", "authMethodType": 0}`),
|
|
), project.APIConfigChangedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyEnabledChanged,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (change_date, sequence, enabled) = ($1, $2, $3) WHERE (object_id = $4) AND (instance_id = $5)",
|
|
expectedArgs: []interface{}{
|
|
anyArg{},
|
|
uint64(15),
|
|
false,
|
|
"appId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyEnabledChanged api config jwt",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.APIConfigChangedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId", "authMethodType": 1}`),
|
|
), project.APIConfigChangedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyEnabledChanged,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (change_date, sequence, enabled) = ($1, $2, $3) WHERE (object_id = $4) AND (instance_id = $5)",
|
|
expectedArgs: []interface{}{
|
|
anyArg{},
|
|
uint64(15),
|
|
true,
|
|
"appId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved app key",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
user.MachineKeyRemovedEventType,
|
|
user.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), user.MachineKeyRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("user"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceInstanceRemoved",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
instance.InstanceRemovedEventType,
|
|
instance.AggregateType,
|
|
nil,
|
|
), instance.InstanceRemovedEventMapper),
|
|
},
|
|
reduce: reduceInstanceRemovedHelper(AuthNKeyInstanceIDCol),
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("instance"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (instance_id = $1)",
|
|
expectedArgs: []interface{}{
|
|
"agg-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyEnabledChanged oidc no change",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.OIDCConfigChangedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId"}`),
|
|
), project.OIDCConfigChangedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyEnabledChanged,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyEnabledChanged oidc config basic",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.OIDCConfigChangedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId", "authMethodType": 0}`),
|
|
), project.OIDCConfigChangedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyEnabledChanged,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (change_date, sequence, enabled) = ($1, $2, $3) WHERE (object_id = $4) AND (instance_id = $5)",
|
|
expectedArgs: []interface{}{
|
|
anyArg{},
|
|
uint64(15),
|
|
false,
|
|
"appId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyEnabledChanged oidc config jwt",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.OIDCConfigChangedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId", "authMethodType": 3}`),
|
|
), project.OIDCConfigChangedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyEnabledChanged,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (change_date, sequence, enabled) = ($1, $2, $3) WHERE (object_id = $4) AND (instance_id = $5)",
|
|
expectedArgs: []interface{}{
|
|
anyArg{},
|
|
uint64(15),
|
|
true,
|
|
"appId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved app key removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.ApplicationKeyRemovedEventType,
|
|
project.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), project.ApplicationKeyRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved app removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.ApplicationRemovedType,
|
|
project.AggregateType,
|
|
[]byte(`{"appId": "appId"}`),
|
|
), project.ApplicationRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (object_id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"appId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved project removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
project.ProjectRemovedType,
|
|
project.AggregateType,
|
|
nil,
|
|
), project.ProjectRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("project"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (aggregate_id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"agg-id",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved machine key removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
user.MachineKeyRemovedEventType,
|
|
user.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), user.MachineKeyRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("user"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved user removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
user.UserRemovedType,
|
|
user.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), user.UserRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("user"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (aggregate_id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"agg-id",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved target key removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
target.KeyRemovedEventType,
|
|
target.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), eventstore.GenericEventMapper[target.KeyRemovedEvent]),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("target"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceAuthNKeyRemoved target removed",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
target.RemovedEventType,
|
|
target.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), eventstore.GenericEventMapper[target.RemovedEvent]),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceAuthNKeyRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("target"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (aggregate_id = $1) AND (instance_id = $2)",
|
|
expectedArgs: []interface{}{
|
|
"agg-id",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceOwnerRemoved",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
org.OrgRemovedEventType,
|
|
org.AggregateType,
|
|
nil,
|
|
), org.OrgRemovedEventMapper),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceOwnerRemoved,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("org"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "DELETE FROM projections.authn_keys2 WHERE (instance_id = $1) AND (resource_owner = $2)",
|
|
expectedArgs: []interface{}{
|
|
"instance-id",
|
|
"agg-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceTargetKeyActivated",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
target.KeyActivatedEventType,
|
|
target.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), eventstore.GenericEventMapper[target.KeyActivatedEvent]),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceTargetKeyActivated,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("target"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (enabled, change_date, sequence) = ($1, $2, $3) WHERE (instance_id = $4) AND (aggregate_id = $5) AND (enabled = $6)",
|
|
expectedArgs: []interface{}{
|
|
false,
|
|
anyArg{},
|
|
uint64(15),
|
|
"instance-id",
|
|
"agg-id",
|
|
true,
|
|
},
|
|
},
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (enabled, change_date, sequence) = ($1, $2, $3) WHERE (id = $4) AND (instance_id = $5)",
|
|
expectedArgs: []interface{}{
|
|
true,
|
|
anyArg{},
|
|
uint64(15),
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "reduceTargetKeyDeactivated",
|
|
args: args{
|
|
event: getEvent(
|
|
testEvent(
|
|
target.KeyDeactivatedEventType,
|
|
target.AggregateType,
|
|
[]byte(`{"keyId": "keyId"}`),
|
|
), eventstore.GenericEventMapper[target.KeyDeactivatedEvent]),
|
|
},
|
|
reduce: (&authNKeyProjection{}).reduceTargetKeyDeactivated,
|
|
want: wantReduce{
|
|
aggregateType: eventstore.AggregateType("target"),
|
|
sequence: 15,
|
|
executer: &testExecuter{
|
|
executions: []execution{
|
|
{
|
|
expectedStmt: "UPDATE projections.authn_keys2 SET (enabled, change_date, sequence) = ($1, $2, $3) WHERE (id = $4) AND (instance_id = $5)",
|
|
expectedArgs: []interface{}{
|
|
false,
|
|
anyArg{},
|
|
uint64(15),
|
|
"keyId",
|
|
"instance-id",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
event := baseEvent(t)
|
|
got, err := tt.reduce(event)
|
|
if !zerrors.IsErrorInvalidArgument(err) {
|
|
t.Errorf("no wrong event mapping: %v, got: %v", err, got)
|
|
}
|
|
|
|
event = tt.args.event(t)
|
|
got, err = tt.reduce(event)
|
|
assertReduce(t, got, err, AuthNKeyTable, tt.want)
|
|
})
|
|
}
|
|
}
|