auth_test.go

// Copyright 2022 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package snippets

import (
	"bytes"
	"context"
	"os"
	"strings"
	"testing"

	"github.com/GoogleCloudPlatform/golang-samples/internal/testutil"
	"golang.org/x/oauth2/google"
	"google.golang.org/api/idtoken"
	"google.golang.org/api/option"
)

func TestAuthSnippets(t *testing.T) {
	ctx := context.Background()
	tc := testutil.SystemTest(t)
	audience := "https://example.com"

	want := "Listed all storage buckets."

	buf := &bytes.Buffer{}

	if err := authenticateExplicitWithAdc(buf); err != nil {
		t.Fatalf("authenticateExplicitWithAdc got err: %v", err)
	}
	if got := buf.String(); !strings.Contains(got, want) {
		t.Errorf("authenticateExplicitWithAdc got %q, want %q", got, want)
	}

	buf.Reset()

	if err := authenticateImplicitWithAdc(buf, tc.ProjectID); err != nil {
		t.Fatalf("authenticateImplicitWithAdc got err: %v", err)
	}
	if got := buf.String(); !strings.Contains(got, want) {
		t.Errorf("authenticateImplicitWithAdc got %q, want %q", got, want)
	}

	want = "Generated ID token."
	buf.Reset()

	if err := getIdTokenFromMetadataServer(buf, audience); err != nil {
		t.Fatalf("getIdTokenFromMetadataServer got err: %v", err)
	}
	if got := buf.String(); !strings.Contains(got, want) {
		t.Errorf("getIdTokenFromMetadataServer got %q, want %q", got, want)
	}

	buf.Reset()

	if err := getIdTokenFromServiceAccount(buf, os.Getenv("GOOGLE_APPLICATION_CREDENTIALS"), audience); err != nil {
		t.Fatalf("getIdTokenFromServiceAccount got err: %v", err)
	}
	if got := buf.String(); !strings.Contains(got, want) {
		t.Errorf("getIdTokenFromServiceAccount got %q, want %q", got, want)
	}

	buf.Reset()
	want = "ID token verified."

	credentials, err := google.FindDefaultCredentials(ctx)
	if err != nil {
		t.Fatalf("failed to generate default credentials: %v", err)
	}

	ts, err := idtoken.NewTokenSource(ctx, audience, option.WithCredentials(credentials))
	if err != nil {
		t.Fatalf("failed to create NewTokenSource: %v", err)
	}

	token, err := ts.Token()
	if err != nil {
		t.Fatalf("failed to get ID token: %v", err)
	}

	if err := verifyGoogleIdToken(buf, token.AccessToken, audience); err != nil {
		t.Fatalf("verifyGoogleIdToken got err: %v", err)
	}
	if got := buf.String(); !strings.Contains(got, want) {
		t.Errorf("verifyGoogleIdToken got %q, want %q", got, want)
	}
}