mirror of
https://github.com/netbirdio/netbird.git
synced 2026-09-15 11:19:08 +02:00
80 lines
2.3 KiB
Go
80 lines
2.3 KiB
Go
//go:build !ios && !android
|
|
|
|
package cmd
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestResolveAllowGroups_NoValuesLeavesSocketOpen(t *testing.T) {
|
|
for name, values := range map[string][]string{
|
|
"nil": nil,
|
|
"empty slice": {},
|
|
"empty string": {""},
|
|
"only whitespace": {" ", "\t"},
|
|
} {
|
|
t.Run(name, func(t *testing.T) {
|
|
resolved, err := resolveAllowGroups(values)
|
|
require.NoError(t, err)
|
|
assert.Empty(t, resolved)
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestResolveAllowGroups_Deduplicates(t *testing.T) {
|
|
resolved, err := resolveAllowGroups([]string{testAllowGroupPrincipal, testAllowGroupPrincipal, " " + testAllowGroupPrincipal + " "})
|
|
require.NoError(t, err)
|
|
assert.Equal(t, []string{testAllowGroupPrincipal}, resolved)
|
|
}
|
|
|
|
func TestResolveAllowGroups_UnresolvableIsAnError(t *testing.T) {
|
|
_, err := resolveAllowGroups([]string{"no-such-group-08b1f0c4"})
|
|
require.Error(t, err)
|
|
assert.Contains(t, err.Error(), "no-such-group-08b1f0c4")
|
|
}
|
|
|
|
func TestCutKind(t *testing.T) {
|
|
tests := []struct {
|
|
value string
|
|
kind string
|
|
rest string
|
|
ok bool
|
|
}{
|
|
{value: "gid:1000", kind: "gid", rest: "1000", ok: true},
|
|
{value: "sid:S-1-5-32-544", kind: "sid", rest: "S-1-5-32-544", ok: true},
|
|
{value: "netbird-users", rest: "netbird-users"},
|
|
{value: "S-1-5-32-544", rest: "S-1-5-32-544"},
|
|
{value: `NETBIRD\Users`, rest: `NETBIRD\Users`},
|
|
// A kind with no value is not a kind: it must not be mistaken for one
|
|
// and accepted as an empty principal.
|
|
{value: "gid:", rest: "gid:"},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.value, func(t *testing.T) {
|
|
kind, rest, ok := cutKind(tc.value)
|
|
assert.Equal(t, tc.ok, ok)
|
|
assert.Equal(t, tc.kind, kind)
|
|
assert.Equal(t, tc.rest, rest)
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestPrincipalValue(t *testing.T) {
|
|
value, ok := principalValue("gid:1000", allowGroupKindGID)
|
|
assert.True(t, ok)
|
|
assert.Equal(t, "1000", value)
|
|
|
|
_, ok = principalValue("sid:S-1-5-32-544", allowGroupKindGID)
|
|
assert.False(t, ok, "a principal of another kind must not be read as this one")
|
|
|
|
_, ok = principalValue("1000", allowGroupKindGID)
|
|
assert.False(t, ok, "an untyped value is not a principal")
|
|
|
|
_, ok = principalValue("gid:", allowGroupKindGID)
|
|
assert.False(t, ok, "an empty value is not a principal")
|
|
}
|