zero: merge pomerium/zero-sdk (#4848)

pkg/zero/cluster/client_test.go

@@ -0,0 +1,59 @@
+package cluster_test
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	api "github.com/pomerium/pomerium/pkg/zero/cluster"
+	"github.com/pomerium/pomerium/pkg/zero/token"
+)
+
+func TestAPIClient(t *testing.T) {
+	t.Parallel()
+
+	respond := func(w http.ResponseWriter, status int, body any) {
+		t.Helper()
+		data, err := json.Marshal(body)
+		require.NoError(t, err)
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(status)
+
+		_, err = w.Write(data)
+		require.NoError(t, err)
+	}
+
+	idToken := "id-token"
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/exchangeToken":
+			respond(w, http.StatusOK, api.ExchangeTokenResponse{
+				IdToken:          idToken,
+				ExpiresInSeconds: "3600",
+			})
+		default:
+			t.Error("unexpected request", r.URL.Path)
+		}
+	}))
+	t.Cleanup(srv.Close)
+
+	fetcher, err := api.NewTokenFetcher(srv.URL)
+	require.NoError(t, err)
+
+	tokenCache := token.NewCache(fetcher, "refresh-token")
+	client, err := api.NewAuthorizedClient(srv.URL, tokenCache.GetToken, http.DefaultClient)
+	require.NoError(t, err)
+
+	resp, err := client.ExchangeClusterIdentityTokenWithResponse(context.Background(),
+		api.ExchangeTokenRequest{
+			RefreshToken: "refresh-token",
+		},
+	)
+	require.NoError(t, err)
+	require.Equal(t, idToken, resp.JSON200.IdToken)
+}