Documentation ¶
Index ¶
- func RequireAuthCodeRegexpMatch(t *testing.T, actualContent string, wantRegexp string, ...)
- func VerifyECDSAIDToken(t *testing.T, issuer, clientID string, jwtSigningKey *ecdsa.PrivateKey, ...) *coreosoidc.IDToken
- type ExchangeAuthcodeAndValidateTokenArgs
- type ExpectedUpstreamStateParamFormat
- type PasswordCredentialsGrantAndValidateTokensArgs
- type PerformRefreshArgs
- type RevokeTokenArgs
- type TestUpstreamLDAPIdentityProvider
- func (u *TestUpstreamLDAPIdentityProvider) AuthenticateUser(ctx context.Context, username, password string) (*authenticators.Response, bool, error)
- func (u *TestUpstreamLDAPIdentityProvider) GetName() string
- func (u *TestUpstreamLDAPIdentityProvider) GetResourceUID() types.UID
- func (u *TestUpstreamLDAPIdentityProvider) GetURL() *url.URL
- func (u *TestUpstreamLDAPIdentityProvider) PerformRefresh(ctx context.Context, storedRefreshAttributes provider.StoredRefreshAttributes) ([]string, error)
- func (u *TestUpstreamLDAPIdentityProvider) PerformRefreshArgs(call int) *PerformRefreshArgs
- func (u *TestUpstreamLDAPIdentityProvider) PerformRefreshCallCount() int
- type TestUpstreamOIDCIdentityProvider
- func (u *TestUpstreamOIDCIdentityProvider) AllowsPasswordGrant() bool
- func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokens(ctx context.Context, authcode string, pkceCodeVerifier pkce.Code, ...) (*oidctypes.Token, error)
- func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensArgs(call int) *ExchangeAuthcodeAndValidateTokenArgs
- func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensCallCount() int
- func (u *TestUpstreamOIDCIdentityProvider) GetAdditionalAuthcodeParams() map[string]string
- func (u *TestUpstreamOIDCIdentityProvider) GetAuthorizationURL() *url.URL
- func (u *TestUpstreamOIDCIdentityProvider) GetClientID() string
- func (u *TestUpstreamOIDCIdentityProvider) GetGroupsClaim() string
- func (u *TestUpstreamOIDCIdentityProvider) GetName() string
- func (u *TestUpstreamOIDCIdentityProvider) GetResourceUID() types.UID
- func (u *TestUpstreamOIDCIdentityProvider) GetRevocationURL() *url.URL
- func (u *TestUpstreamOIDCIdentityProvider) GetScopes() []string
- func (u *TestUpstreamOIDCIdentityProvider) GetUsernameClaim() string
- func (u *TestUpstreamOIDCIdentityProvider) HasUserInfoURL() bool
- func (u *TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokens(ctx context.Context, username, password string) (*oidctypes.Token, error)
- func (u *TestUpstreamOIDCIdentityProvider) PerformRefresh(ctx context.Context, refreshToken string) (*oauth2.Token, error)
- func (u *TestUpstreamOIDCIdentityProvider) PerformRefreshArgs(call int) *PerformRefreshArgs
- func (u *TestUpstreamOIDCIdentityProvider) PerformRefreshCallCount() int
- func (u *TestUpstreamOIDCIdentityProvider) RevokeToken(ctx context.Context, token string, tokenType provider.RevocableTokenType) error
- func (u *TestUpstreamOIDCIdentityProvider) RevokeTokenArgs(call int) *RevokeTokenArgs
- func (u *TestUpstreamOIDCIdentityProvider) RevokeTokenCallCount() int
- func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfo(ctx context.Context, tok *oauth2.Token, expectedIDTokenNonce nonce.Nonce, ...) (*oidctypes.Token, error)
- func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoArgs(call int) *ValidateTokenAndMergeWithUserInfoArgs
- func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoCallCount() int
- type TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) Build() *TestUpstreamOIDCIdentityProvider
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAccessToken(token string, expiry metav1.Time) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAdditionalAuthcodeParams(params map[string]string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAllowPasswordGrant(value bool) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAuthorizationURL(value url.URL) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithClientID(value string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithEmptyAccessToken() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithEmptyRefreshToken() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithGroupsClaim(value string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithIDTokenClaim(name string, value interface{}) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithName(value string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithPasswordGrantError(err error) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithPerformRefreshError(err error) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithRefreshToken(token string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithRefreshedTokens(tokens *oauth2.Token) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithResourceUID(value types.UID) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithRevokeTokenError(err error) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithScopes(values []string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithUpstreamAuthcodeExchangeError(err error) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithUserInfoURL() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithUsernameClaim(value string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithValidateTokenAndMergeWithUserInfoError(err error) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithValidatedAndMergedWithUserInfoTokens(tokens *oidctypes.Token) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutAccessToken() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutGroupsClaim() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutIDTokenClaim(claim string) *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutRefreshToken() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutUserInfoURL() *TestUpstreamOIDCIdentityProviderBuilder
- func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutUsernameClaim() *TestUpstreamOIDCIdentityProviderBuilder
- type UpstreamIDPListerBuilder
- func (b *UpstreamIDPListerBuilder) Build() provider.DynamicUpstreamIDPProvider
- func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToExchangeAuthcodeAndValidateTokens(t *testing.T, expectedPerformedByUpstreamName string, ...)
- func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToPasswordCredentialsGrantAndValidateTokens(t *testing.T, expectedPerformedByUpstreamName string, ...)
- func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToPerformRefresh(t *testing.T, expectedPerformedByUpstreamName string, ...)
- func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToRevokeToken(t *testing.T, expectedPerformedByUpstreamName string, ...)
- func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToValidateToken(t *testing.T, expectedPerformedByUpstreamName string, ...)
- func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToExchangeAuthcodeAndValidateTokens(t *testing.T)
- func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToPasswordCredentialsGrantAndValidateTokens(t *testing.T)
- func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToPerformRefresh(t *testing.T)
- func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToRevokeToken(t *testing.T)
- func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToValidateToken(t *testing.T)
- func (b *UpstreamIDPListerBuilder) WithActiveDirectory(upstreamActiveDirectoryIdentityProviders ...*TestUpstreamLDAPIdentityProvider) *UpstreamIDPListerBuilder
- func (b *UpstreamIDPListerBuilder) WithLDAP(upstreamLDAPIdentityProviders ...*TestUpstreamLDAPIdentityProvider) *UpstreamIDPListerBuilder
- func (b *UpstreamIDPListerBuilder) WithOIDC(upstreamOIDCIdentityProviders ...*TestUpstreamOIDCIdentityProvider) *UpstreamIDPListerBuilder
- type ValidateRefreshArgs
- type ValidateTokenAndMergeWithUserInfoArgs
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func RequireAuthCodeRegexpMatch ¶ added in v0.10.0
func RequireAuthCodeRegexpMatch( t *testing.T, actualContent string, wantRegexp string, kubeClient *fake.Clientset, secretsClient v1.SecretInterface, oauthStore fositestoragei.AllFositeStorage, wantDownstreamGrantedScopes []string, wantDownstreamIDTokenSubject string, wantDownstreamIDTokenUsername string, wantDownstreamIDTokenGroups []string, wantDownstreamRequestedScopes []string, wantDownstreamPKCEChallenge string, wantDownstreamPKCEChallengeMethod string, wantDownstreamNonce string, wantDownstreamClientID string, wantDownstreamRedirectURI string, wantCustomSessionData *psession.CustomSessionData, )
func VerifyECDSAIDToken ¶
func VerifyECDSAIDToken( t *testing.T, issuer, clientID string, jwtSigningKey *ecdsa.PrivateKey, idToken string, ) *coreosoidc.IDToken
VerifyECDSAIDToken verifies that the provided idToken was issued via the provided jwtSigningKey. It also performs some light validation on the claims, i.e., it makes sure the provided idToken has the provided issuer and clientID.
Further validation can be done via callers via the returned coreosoidc.IDToken.
Types ¶
type ExchangeAuthcodeAndValidateTokenArgs ¶
type ExchangeAuthcodeAndValidateTokenArgs struct { Ctx context.Context Authcode string PKCECodeVerifier pkce.Code ExpectedIDTokenNonce nonce.Nonce RedirectURI string }
ExchangeAuthcodeAndValidateTokenArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.ExchangeAuthcodeAndValidateTokensFunc().
type ExpectedUpstreamStateParamFormat ¶
type ExpectedUpstreamStateParamFormat struct { P string `json:"p"` U string `json:"u"` N string `json:"n"` C string `json:"c"` K string `json:"k"` V string `json:"v"` }
Declare a separate type from the production code to ensure that the state param's contents was serialized in the format that we expect, with the json keys that we expect, etc. This also ensure that the order of the serialized fields is the same, which doesn't really matter expect that we can make simpler equality assertions about the redirect URL in this test.
type PasswordCredentialsGrantAndValidateTokensArgs ¶ added in v0.11.0
type PasswordCredentialsGrantAndValidateTokensArgs struct { Ctx context.Context Username string Password string }
PasswordCredentialsGrantAndValidateTokensArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.PasswordCredentialsGrantAndValidateTokensFunc().
type PerformRefreshArgs ¶ added in v0.13.0
type PerformRefreshArgs struct { Ctx context.Context RefreshToken string DN string ExpectedUsername string ExpectedSubject string }
PerformRefreshArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.PerformRefreshFunc().
type RevokeTokenArgs ¶ added in v0.13.0
type RevokeTokenArgs struct { Ctx context.Context Token string TokenType provider.RevocableTokenType }
RevokeTokenArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.RevokeTokenArgsFunc().
type TestUpstreamLDAPIdentityProvider ¶
type TestUpstreamLDAPIdentityProvider struct { Name string ResourceUID types.UID URL *url.URL AuthenticateFunc func(ctx context.Context, username, password string) (*authenticators.Response, bool, error) PerformRefreshErr error PerformRefreshGroups []string // contains filtered or unexported fields }
func (*TestUpstreamLDAPIdentityProvider) AuthenticateUser ¶
func (u *TestUpstreamLDAPIdentityProvider) AuthenticateUser(ctx context.Context, username, password string) (*authenticators.Response, bool, error)
func (*TestUpstreamLDAPIdentityProvider) GetName ¶
func (u *TestUpstreamLDAPIdentityProvider) GetName() string
func (*TestUpstreamLDAPIdentityProvider) GetResourceUID ¶ added in v0.13.0
func (u *TestUpstreamLDAPIdentityProvider) GetResourceUID() types.UID
func (*TestUpstreamLDAPIdentityProvider) GetURL ¶
func (u *TestUpstreamLDAPIdentityProvider) GetURL() *url.URL
func (*TestUpstreamLDAPIdentityProvider) PerformRefresh ¶ added in v0.13.0
func (u *TestUpstreamLDAPIdentityProvider) PerformRefresh(ctx context.Context, storedRefreshAttributes provider.StoredRefreshAttributes) ([]string, error)
func (*TestUpstreamLDAPIdentityProvider) PerformRefreshArgs ¶ added in v0.13.0
func (u *TestUpstreamLDAPIdentityProvider) PerformRefreshArgs(call int) *PerformRefreshArgs
func (*TestUpstreamLDAPIdentityProvider) PerformRefreshCallCount ¶ added in v0.13.0
func (u *TestUpstreamLDAPIdentityProvider) PerformRefreshCallCount() int
type TestUpstreamOIDCIdentityProvider ¶
type TestUpstreamOIDCIdentityProvider struct { Name string ClientID string ResourceUID types.UID AuthorizationURL url.URL UserInfoURL bool RevocationURL *url.URL UsernameClaim string GroupsClaim string Scopes []string AdditionalAuthcodeParams map[string]string AllowPasswordGrant bool ExchangeAuthcodeAndValidateTokensFunc func( ctx context.Context, authcode string, pkceCodeVerifier pkce.Code, expectedIDTokenNonce nonce.Nonce, ) (*oidctypes.Token, error) PasswordCredentialsGrantAndValidateTokensFunc func( ctx context.Context, username string, password string, ) (*oidctypes.Token, error) PerformRefreshFunc func(ctx context.Context, refreshToken string) (*oauth2.Token, error) RevokeTokenFunc func(ctx context.Context, refreshToken string, tokenType provider.RevocableTokenType) error ValidateTokenAndMergeWithUserInfoFunc func(ctx context.Context, tok *oauth2.Token, expectedIDTokenNonce nonce.Nonce) (*oidctypes.Token, error) // contains filtered or unexported fields }
func (*TestUpstreamOIDCIdentityProvider) AllowsPasswordGrant ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProvider) AllowsPasswordGrant() bool
func (*TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokens ¶
func (*TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensArgs ¶
func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensArgs(call int) *ExchangeAuthcodeAndValidateTokenArgs
func (*TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensCallCount ¶
func (u *TestUpstreamOIDCIdentityProvider) ExchangeAuthcodeAndValidateTokensCallCount() int
func (*TestUpstreamOIDCIdentityProvider) GetAdditionalAuthcodeParams ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) GetAdditionalAuthcodeParams() map[string]string
func (*TestUpstreamOIDCIdentityProvider) GetAuthorizationURL ¶
func (u *TestUpstreamOIDCIdentityProvider) GetAuthorizationURL() *url.URL
func (*TestUpstreamOIDCIdentityProvider) GetClientID ¶
func (u *TestUpstreamOIDCIdentityProvider) GetClientID() string
func (*TestUpstreamOIDCIdentityProvider) GetGroupsClaim ¶
func (u *TestUpstreamOIDCIdentityProvider) GetGroupsClaim() string
func (*TestUpstreamOIDCIdentityProvider) GetName ¶
func (u *TestUpstreamOIDCIdentityProvider) GetName() string
func (*TestUpstreamOIDCIdentityProvider) GetResourceUID ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) GetResourceUID() types.UID
func (*TestUpstreamOIDCIdentityProvider) GetRevocationURL ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) GetRevocationURL() *url.URL
func (*TestUpstreamOIDCIdentityProvider) GetScopes ¶
func (u *TestUpstreamOIDCIdentityProvider) GetScopes() []string
func (*TestUpstreamOIDCIdentityProvider) GetUsernameClaim ¶
func (u *TestUpstreamOIDCIdentityProvider) GetUsernameClaim() string
func (*TestUpstreamOIDCIdentityProvider) HasUserInfoURL ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) HasUserInfoURL() bool
func (*TestUpstreamOIDCIdentityProvider) PasswordCredentialsGrantAndValidateTokens ¶ added in v0.11.0
func (*TestUpstreamOIDCIdentityProvider) PerformRefresh ¶ added in v0.13.0
func (*TestUpstreamOIDCIdentityProvider) PerformRefreshArgs ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) PerformRefreshArgs(call int) *PerformRefreshArgs
func (*TestUpstreamOIDCIdentityProvider) PerformRefreshCallCount ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) PerformRefreshCallCount() int
func (*TestUpstreamOIDCIdentityProvider) RevokeToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) RevokeToken(ctx context.Context, token string, tokenType provider.RevocableTokenType) error
func (*TestUpstreamOIDCIdentityProvider) RevokeTokenArgs ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) RevokeTokenArgs(call int) *RevokeTokenArgs
func (*TestUpstreamOIDCIdentityProvider) RevokeTokenCallCount ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) RevokeTokenCallCount() int
func (*TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfo ¶ added in v0.13.0
func (*TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoArgs ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoArgs(call int) *ValidateTokenAndMergeWithUserInfoArgs
func (*TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoCallCount ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProvider) ValidateTokenAndMergeWithUserInfoCallCount() int
type TestUpstreamOIDCIdentityProviderBuilder ¶ added in v0.11.0
type TestUpstreamOIDCIdentityProviderBuilder struct {
// contains filtered or unexported fields
}
func NewTestUpstreamOIDCIdentityProviderBuilder ¶ added in v0.11.0
func NewTestUpstreamOIDCIdentityProviderBuilder() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) Build ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) Build() *TestUpstreamOIDCIdentityProvider
func (*TestUpstreamOIDCIdentityProviderBuilder) WithAccessToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAccessToken(token string, expiry metav1.Time) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithAdditionalAuthcodeParams ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAdditionalAuthcodeParams(params map[string]string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithAllowPasswordGrant ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAllowPasswordGrant(value bool) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithAuthorizationURL ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithAuthorizationURL(value url.URL) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithClientID ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithClientID(value string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithEmptyAccessToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithEmptyAccessToken() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithEmptyRefreshToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithEmptyRefreshToken() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithGroupsClaim ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithGroupsClaim(value string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithIDTokenClaim ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithIDTokenClaim(name string, value interface{}) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithName ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithName(value string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithPasswordGrantError ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithPasswordGrantError(err error) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithPerformRefreshError ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithPerformRefreshError(err error) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithRefreshToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithRefreshToken(token string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithRefreshedTokens ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithRefreshedTokens(tokens *oauth2.Token) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithResourceUID ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithResourceUID(value types.UID) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithRevokeTokenError ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithRevokeTokenError(err error) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithScopes ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithScopes(values []string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithUpstreamAuthcodeExchangeError ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithUpstreamAuthcodeExchangeError(err error) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithUserInfoURL ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithUserInfoURL() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithUsernameClaim ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithUsernameClaim(value string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithValidateTokenAndMergeWithUserInfoError ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithValidateTokenAndMergeWithUserInfoError(err error) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithValidatedAndMergedWithUserInfoTokens ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithValidatedAndMergedWithUserInfoTokens(tokens *oidctypes.Token) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutAccessToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutAccessToken() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutGroupsClaim ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutGroupsClaim() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutIDTokenClaim ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutIDTokenClaim(claim string) *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutRefreshToken ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutRefreshToken() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutUserInfoURL ¶ added in v0.13.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutUserInfoURL() *TestUpstreamOIDCIdentityProviderBuilder
func (*TestUpstreamOIDCIdentityProviderBuilder) WithoutUsernameClaim ¶ added in v0.11.0
func (u *TestUpstreamOIDCIdentityProviderBuilder) WithoutUsernameClaim() *TestUpstreamOIDCIdentityProviderBuilder
type UpstreamIDPListerBuilder ¶
type UpstreamIDPListerBuilder struct {
// contains filtered or unexported fields
}
func NewUpstreamIDPListerBuilder ¶
func NewUpstreamIDPListerBuilder() *UpstreamIDPListerBuilder
func (*UpstreamIDPListerBuilder) Build ¶
func (b *UpstreamIDPListerBuilder) Build() provider.DynamicUpstreamIDPProvider
func (*UpstreamIDPListerBuilder) RequireExactlyOneCallToExchangeAuthcodeAndValidateTokens ¶ added in v0.11.0
func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToExchangeAuthcodeAndValidateTokens( t *testing.T, expectedPerformedByUpstreamName string, expectedArgs *ExchangeAuthcodeAndValidateTokenArgs, )
func (*UpstreamIDPListerBuilder) RequireExactlyOneCallToPasswordCredentialsGrantAndValidateTokens ¶ added in v0.11.0
func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToPasswordCredentialsGrantAndValidateTokens( t *testing.T, expectedPerformedByUpstreamName string, expectedArgs *PasswordCredentialsGrantAndValidateTokensArgs, )
func (*UpstreamIDPListerBuilder) RequireExactlyOneCallToPerformRefresh ¶ added in v0.13.0
func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToPerformRefresh( t *testing.T, expectedPerformedByUpstreamName string, expectedArgs *PerformRefreshArgs, )
func (*UpstreamIDPListerBuilder) RequireExactlyOneCallToRevokeToken ¶ added in v0.13.0
func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToRevokeToken( t *testing.T, expectedPerformedByUpstreamName string, expectedArgs *RevokeTokenArgs, )
func (*UpstreamIDPListerBuilder) RequireExactlyOneCallToValidateToken ¶ added in v0.13.0
func (b *UpstreamIDPListerBuilder) RequireExactlyOneCallToValidateToken( t *testing.T, expectedPerformedByUpstreamName string, expectedArgs *ValidateTokenAndMergeWithUserInfoArgs, )
func (*UpstreamIDPListerBuilder) RequireExactlyZeroCallsToExchangeAuthcodeAndValidateTokens ¶ added in v0.11.0
func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToExchangeAuthcodeAndValidateTokens(t *testing.T)
func (*UpstreamIDPListerBuilder) RequireExactlyZeroCallsToPasswordCredentialsGrantAndValidateTokens ¶ added in v0.11.0
func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToPasswordCredentialsGrantAndValidateTokens(t *testing.T)
func (*UpstreamIDPListerBuilder) RequireExactlyZeroCallsToPerformRefresh ¶ added in v0.13.0
func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToPerformRefresh(t *testing.T)
func (*UpstreamIDPListerBuilder) RequireExactlyZeroCallsToRevokeToken ¶ added in v0.13.0
func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToRevokeToken(t *testing.T)
func (*UpstreamIDPListerBuilder) RequireExactlyZeroCallsToValidateToken ¶ added in v0.13.0
func (b *UpstreamIDPListerBuilder) RequireExactlyZeroCallsToValidateToken(t *testing.T)
func (*UpstreamIDPListerBuilder) WithActiveDirectory ¶ added in v0.11.0
func (b *UpstreamIDPListerBuilder) WithActiveDirectory(upstreamActiveDirectoryIdentityProviders ...*TestUpstreamLDAPIdentityProvider) *UpstreamIDPListerBuilder
func (*UpstreamIDPListerBuilder) WithLDAP ¶
func (b *UpstreamIDPListerBuilder) WithLDAP(upstreamLDAPIdentityProviders ...*TestUpstreamLDAPIdentityProvider) *UpstreamIDPListerBuilder
func (*UpstreamIDPListerBuilder) WithOIDC ¶
func (b *UpstreamIDPListerBuilder) WithOIDC(upstreamOIDCIdentityProviders ...*TestUpstreamOIDCIdentityProvider) *UpstreamIDPListerBuilder
type ValidateRefreshArgs ¶ added in v0.13.0
type ValidateTokenAndMergeWithUserInfoArgs ¶ added in v0.13.0
type ValidateTokenAndMergeWithUserInfoArgs struct { Ctx context.Context Tok *oauth2.Token ExpectedIDTokenNonce nonce.Nonce RequireIDToken bool RequireUserInfo bool }
ValidateTokenAndMergeWithUserInfoArgs is used to spy on calls to TestUpstreamOIDCIdentityProvider.ValidateTokenAndMergeWithUserInfoFunc().