mirror of
https://github.com/pomerium/pomerium.git
synced 2025-08-02 16:30:17 +02:00
ppl: add support for additional data (#2696)
* ppl: add support for additional data * remove unused NewCriterionDeviceRule
This commit is contained in:
parent
0638b07f4d
commit
6e48627b4d
17 changed files with 205 additions and 59 deletions
|
@ -18,7 +18,7 @@ allow:
|
|||
is: USER_ID
|
||||
`, []dataBrokerRecord{}, Input{Session: InputSession{ID: "SESSION_ID"}})
|
||||
require.NoError(t, err)
|
||||
require.Equal(t, A{false, A{ReasonUserUnauthenticated}}, res["allow"])
|
||||
require.Equal(t, A{false, A{ReasonUserUnauthenticated}, M{}}, res["allow"])
|
||||
require.Equal(t, A{false, A{}}, res["deny"])
|
||||
})
|
||||
t.Run("by user id", func(t *testing.T) {
|
||||
|
@ -36,7 +36,7 @@ allow:
|
|||
},
|
||||
Input{Session: InputSession{ID: "SESSION_ID"}})
|
||||
require.NoError(t, err)
|
||||
require.Equal(t, A{true, A{ReasonUserOK}}, res["allow"])
|
||||
require.Equal(t, A{true, A{ReasonUserOK}, M{}}, res["allow"])
|
||||
require.Equal(t, A{false, A{}}, res["deny"])
|
||||
})
|
||||
t.Run("by impersonate session id", func(t *testing.T) {
|
||||
|
@ -59,7 +59,7 @@ allow:
|
|||
},
|
||||
Input{Session: InputSession{ID: "SESSION1"}})
|
||||
require.NoError(t, err)
|
||||
require.Equal(t, A{true, A{ReasonUserOK}}, res["allow"])
|
||||
require.Equal(t, A{true, A{ReasonUserOK}, M{}}, res["allow"])
|
||||
require.Equal(t, A{false, A{}}, res["deny"])
|
||||
})
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue