mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-22 21:47:16 +02:00
e138054cb9
* policy: add parser and generator for Pomerium Policy Language * add criteria * add additional criteria
39 lines
852 B
Go
39 lines
852 B
Go
package criteria
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/pomerium/pomerium/pkg/grpc/session"
|
|
)
|
|
|
|
func TestAuthenticatedUser(t *testing.T) {
|
|
t.Run("no session", func(t *testing.T) {
|
|
res, err := evaluate(t, `
|
|
allow:
|
|
and:
|
|
- authenticated_user: 1
|
|
`, []dataBrokerRecord{}, Input{Session: InputSession{ID: "SESSION_ID"}})
|
|
require.NoError(t, err)
|
|
require.Equal(t, false, res["allow"])
|
|
require.Equal(t, false, res["deny"])
|
|
})
|
|
t.Run("by domain", func(t *testing.T) {
|
|
res, err := evaluate(t, `
|
|
allow:
|
|
and:
|
|
- authenticated_user: 1
|
|
`,
|
|
[]dataBrokerRecord{
|
|
&session.Session{
|
|
Id: "SESSION_ID",
|
|
UserId: "USER_ID",
|
|
},
|
|
},
|
|
Input{Session: InputSession{ID: "SESSION_ID"}})
|
|
require.NoError(t, err)
|
|
require.Equal(t, true, res["allow"])
|
|
require.Equal(t, false, res["deny"])
|
|
})
|
|
}
|