run_auth_config_test.go RawHistoryFolder

1package app
2
3import (
4	"context"
5	"strings"
6	"testing"
7
8	"github.com/bnema/gordon/internal/domain"
9	"github.com/bnema/zerowrap"
10	"github.com/spf13/viper"
11)
12
13func TestBuildAuthConfig_UsesConfigEnabledFlag(t *testing.T) {
14	t.Setenv(TokenSecretEnvVar, "test-token-secret")
15
16	cfg := Config{}
17	cfg.Auth.Enabled = false
18	cfg.Auth.Type = "token"
19
20	authCfg, err := buildAuthConfig(context.Background(), cfg, domain.AuthTypeToken, domain.SecretsBackendUnsafe, t.TempDir(), zerowrap.Default())
21	if err != nil {
22		t.Fatalf("expected no error, got %v", err)
23	}
24	if authCfg.Enabled {
25		t.Fatalf("expected auth config enabled=false, got true")
26	}
27}
28
29func TestResolveSecretsBackend_RejectsMissingBackend(t *testing.T) {
30	_, err := resolveSecretsBackend("")
31	if err == nil {
32		t.Fatal("expected error for missing secrets backend")
33	}
34	if !strings.Contains(err.Error(), "auth.secrets_backend is required") {
35		t.Fatalf("unexpected error: %v", err)
36	}
37}
38
39func TestResolveSecretsBackend_RejectsUnknownBackend(t *testing.T) {
40	_, err := resolveSecretsBackend("vault")
41	if err == nil {
42		t.Fatal("expected error for unsupported secrets backend")
43	}
44	if !strings.Contains(err.Error(), `unsupported auth.secrets_backend "vault"`) {
45		t.Fatalf("unexpected error: %v", err)
46	}
47}
48
49func TestLoadConfig_DoesNotDefaultSecretsBackendToUnsafe(t *testing.T) {
50	v := viper.New()
51
52	err := loadConfig(v, "")
53	if err != nil {
54		t.Fatalf("expected no error, got %v", err)
55	}
56
57	if got := v.GetString("auth.secrets_backend"); got != "" {
58		t.Fatalf("expected empty default for auth.secrets_backend, got %q", got)
59	}
60}