iamtest

Documentation

Overview

Package iamtest provides primitives for unit testing IAM implementations.

Index

• func NewCaller(members ...string) *iamv1.Caller
• func WithMembers(ctx context.Context, members ...string) context.Context
• type Fixture
  • func NewFixture(server *iamspanner.IAMServer) *Fixture
  • func (fx *Fixture) AddPolicyBinding(t *testing.T, resource, role, member string)
• type PermissionTester
  • func NewPermissionTester() *PermissionTester
  • func (p *PermissionTester) Allow(member, permission string, resources ...string) *PermissionTester
  • func (p *PermissionTester) AllowAll() *PermissionTester
  • func (p *PermissionTester) Reset() *PermissionTester
  • func (p *PermissionTester) TestPermissions(_ context.Context, caller *iamv1.Caller, resourcePermissions map[string]string) (map[string]bool, error)

Functions

func NewCaller

func NewCaller(members ...string) *iamv1.Caller

NewCaller creates a new caller for test purposes.

func WithMembers

func WithMembers(ctx context.Context, members ...string) context.Context

WithMembers returns a new context with resolved IAM members for test purposes.

Types

type Fixture

type Fixture struct {
	// contains filtered or unexported fields
}

Fixture is a test fixture with helper methods for IAM testing.

func NewFixture

func NewFixture(server *iamspanner.IAMServer) *Fixture

NewFixture creates a new Fixture for the provided iamspanner.IAMServer.

func (*Fixture) AddPolicyBinding

func (fx *Fixture) AddPolicyBinding(t *testing.T, resource, role, member string)

AddPolicyBinding adds the provided policy binding.

type PermissionTester

type PermissionTester struct {
	// contains filtered or unexported fields
}

PermissionTester is a mock permission tester.

func NewPermissionTester

func NewPermissionTester() *PermissionTester

NewPermissionTester creates a new mock permission tester.

func (*PermissionTester) Allow

func (p *PermissionTester) Allow(member, permission string, resources ...string) *PermissionTester

Allow a permission for a member and resource.

func (*PermissionTester) AllowAll

func (p *PermissionTester) AllowAll() *PermissionTester

AllowAll allows all testable permissions for all members and all resources.

func (*PermissionTester) Reset

func (p *PermissionTester) Reset() *PermissionTester

Reset all allowed permissions.

func (*PermissionTester) TestPermissions

func (p *PermissionTester) TestPermissions(
	_ context.Context,
	caller *iamv1.Caller,
	resourcePermissions map[string]string,
) (map[string]bool, error)

TestPermissions implements iamcel.PermissionTester.