seaweedfs/weed/filer/s3iam_conf_test.go

184 lines
3.8 KiB
Go
Raw Permalink Normal View History

2020-12-07 07:16:20 +00:00
package filer
2020-11-25 21:26:45 +00:00
import (
2020-12-07 07:16:20 +00:00
"bytes"
2020-11-25 21:26:45 +00:00
"testing"
. "github.com/seaweedfs/seaweedfs/weed/s3api/s3_constants"
2022-07-13 09:28:20 +00:00
"github.com/seaweedfs/seaweedfs/weed/pb/iam_pb"
2020-11-25 21:26:45 +00:00
"github.com/stretchr/testify/assert"
)
func TestS3Conf(t *testing.T) {
s3Conf := &iam_pb.S3ApiConfiguration{
Identities: []*iam_pb.Identity{
{
Name: "some_name",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key1",
SecretKey: "some_secret_key1",
},
},
Actions: []string{
2020-12-07 08:29:17 +00:00
ACTION_ADMIN,
ACTION_READ,
ACTION_WRITE,
2020-11-25 21:26:45 +00:00
},
},
{
Name: "some_read_only_user",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key2",
SecretKey: "some_secret_key2",
},
},
Actions: []string{
2020-12-07 08:29:17 +00:00
ACTION_READ,
ACTION_TAGGING,
ACTION_LIST,
2020-11-25 21:26:45 +00:00
},
},
},
}
2020-12-07 07:16:20 +00:00
var buf bytes.Buffer
2021-07-09 10:19:21 +00:00
err := ProtoToText(&buf, s3Conf)
2020-12-02 12:19:05 +00:00
assert.Equal(t, err, nil)
2020-11-25 21:26:45 +00:00
s3ConfSaved := &iam_pb.S3ApiConfiguration{}
2020-12-07 07:16:20 +00:00
err = ParseS3ConfigurationFromBytes(buf.Bytes(), s3ConfSaved)
2020-12-02 12:19:05 +00:00
assert.Equal(t, err, nil)
2020-11-25 21:26:45 +00:00
assert.Equal(t, "some_name", s3ConfSaved.Identities[0].Name)
assert.Equal(t, "some_read_only_user", s3ConfSaved.Identities[1].Name)
assert.Equal(t, "some_access_key1", s3ConfSaved.Identities[0].Credentials[0].AccessKey)
assert.Equal(t, "some_secret_key2", s3ConfSaved.Identities[1].Credentials[0].SecretKey)
}
2022-07-13 09:28:20 +00:00
func TestCheckDuplicateAccessKey(t *testing.T) {
var tests = []struct {
s3cfg *iam_pb.S3ApiConfiguration
err string
}{
{
&iam_pb.S3ApiConfiguration{
Identities: []*iam_pb.Identity{
{
Name: "some_name",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key1",
SecretKey: "some_secret_key1",
},
},
Actions: []string{
ACTION_ADMIN,
ACTION_READ,
ACTION_WRITE,
},
},
{
Name: "some_read_only_user",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key2",
SecretKey: "some_secret_key2",
},
},
Actions: []string{
ACTION_READ,
ACTION_TAGGING,
ACTION_LIST,
},
},
},
},
"",
},
{
&iam_pb.S3ApiConfiguration{
Identities: []*iam_pb.Identity{
{
Name: "some_name",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key1",
SecretKey: "some_secret_key1",
},
},
Actions: []string{
ACTION_ADMIN,
ACTION_READ,
ACTION_WRITE,
},
},
{
Name: "some_name",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key1",
SecretKey: "some_secret_key1",
},
},
Actions: []string{
ACTION_READ,
ACTION_TAGGING,
ACTION_LIST,
},
},
},
},
"",
},
{
&iam_pb.S3ApiConfiguration{
2022-07-13 09:28:20 +00:00
Identities: []*iam_pb.Identity{
{
Name: "some_name",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key1",
SecretKey: "some_secret_key1",
},
},
Actions: []string{
ACTION_ADMIN,
ACTION_READ,
ACTION_WRITE,
},
},
{
Name: "some_read_only_user",
Credentials: []*iam_pb.Credential{
{
AccessKey: "some_access_key1",
SecretKey: "some_secret_key1",
},
},
Actions: []string{
ACTION_READ,
ACTION_TAGGING,
ACTION_LIST,
},
},
},
},
"duplicate accessKey[some_access_key1], already configured in user[some_name]",
},
}
for i, test := range tests {
err := CheckDuplicateAccessKey(test.s3cfg)
var errString string
if err == nil {
errString = ""
} else {
errString = err.Error()
}
if errString != test.err {
t.Errorf("[%d]: got: %s expected: %s", i, errString, test.err)
}
}
}