mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
zeekayandHanzo Dev
cd4e9a11bb
Every variable the code reads or sets is now ZT_* with the same suffix, with no aliases for the old names. User-facing text, default CSR fields and error messages follow, as do the identifiers on the lines that changed. Three names keep their spelling because another program owns them: the C tunneler reads ZITI_LOG and ZITI_TIME_FORMAT, and the Go SDK reads ZITI_TRACE_ENABLED. Co-authored-by: Hanzo Dev <[email protected]>
399 lines
17 KiB
Go
399 lines
17 KiB
Go
//go:build cli_tests
|
|
|
|
/*
|
|
Copyright NetFoundry Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
https://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package cli_tests
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/antchfx/jsonquery"
|
|
"github.com/hanzozt/zt/v2/tests/testutil"
|
|
"github.com/hanzozt/zt/v2/zt/cmd/ascode/exporter"
|
|
"github.com/hanzozt/zt/v2/zt/cmd/ascode/importer"
|
|
"github.com/michaelquigley/pfxlog"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
var log = pfxlog.Logger()
|
|
|
|
func TestYamlUploadAndDownload(t *testing.T) {
|
|
ztPath := os.Getenv("ZT_CLI_TEST_ZT_BIN")
|
|
if ztPath == "" {
|
|
t.Fatalf("ZT_CLI_TEST_ZT_BIN not set")
|
|
}
|
|
ctx, cancel := context.WithCancel(context.Background())
|
|
|
|
baseDir := filepath.Join(os.TempDir(), "import-tests")
|
|
if me := os.MkdirAll(baseDir, 0755); me != nil {
|
|
t.Fatalf("failed creating baseDir dir: %v", baseDir)
|
|
}
|
|
testRunHome, err := os.MkdirTemp(baseDir, "test-run-*")
|
|
if err != nil {
|
|
t.Fatalf("failed creating temp dir: %v", err)
|
|
}
|
|
|
|
// set ZT_CONFIG_DIR so that anything here forth is not corrupting local stuff
|
|
_ = os.Setenv("ZT_CONFIG_DIR", filepath.Join(testRunHome, ".config/zt"))
|
|
overlay := testutil.CreateOverlay(t, ctx, 60*time.Second, testRunHome, "import", false)
|
|
targetDone := make(chan error)
|
|
go overlay.StartExternal(ztPath, targetDone)
|
|
|
|
defer func() {
|
|
if !t.Failed() {
|
|
// allow/ensure the processes to exit windows is a pain about rm'ing folders if not
|
|
errChan := make(chan error, 1)
|
|
|
|
go func() { errChan <- overlay.Stop() }()
|
|
success := true
|
|
|
|
if err := <-errChan; err != nil {
|
|
t.Logf("stop error: %v", err)
|
|
success = false
|
|
}
|
|
|
|
if !success {
|
|
t.Logf("manual cleanup may be required at %s", testRunHome)
|
|
} else {
|
|
t.Logf("tests passed, removing temp dir at %s", testRunHome)
|
|
if rerr := os.RemoveAll(testRunHome); rerr != nil {
|
|
t.Logf("remove %s failed... **sigh**: %v", testRunHome, rerr)
|
|
}
|
|
}
|
|
} else {
|
|
t.Logf("tests failed, temp dir left intact at %s", testRunHome)
|
|
}
|
|
overlay.CleanupPids()
|
|
}()
|
|
startErr := overlay.WaitForControllerReady(20 * time.Second)
|
|
if startErr != nil {
|
|
log.Fatalf("start controller failed: %v", startErr)
|
|
}
|
|
|
|
performImport(t, overlay.ControllerHostPort())
|
|
performAllTest(t, overlay.ControllerHostPort())
|
|
performServiceAndConfigTest(t, overlay.ControllerHostPort())
|
|
performIdentitiesTest(t, overlay.ControllerHostPort())
|
|
|
|
cancel() //terminate the running ctrl/router
|
|
|
|
fmt.Println("Operation completed")
|
|
}
|
|
|
|
func performImport(t *testing.T, url string) {
|
|
|
|
errWriter := strings.Builder{}
|
|
|
|
uploadWriter := strings.Builder{}
|
|
importCmd := importer.NewImportCmd(&uploadWriter, &errWriter)
|
|
importCmd.SetArgs([]string{"--input-format=yaml", "--yes", "--controller-url=" + url, "--username=admin", "--password=admin", "./test.yaml"})
|
|
|
|
err := importCmd.Execute()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
}
|
|
|
|
func performAllTest(t *testing.T, url string) {
|
|
|
|
// Create a temporary file in the default temporary directory
|
|
tempFile, err := os.CreateTemp("", "ascode-output-*.json")
|
|
if err != nil {
|
|
t.Fatalf("error creating temp file: %v", err)
|
|
}
|
|
defer func() { _ = os.Remove(tempFile.Name()) }()
|
|
log.Info("output file: ", tempFile.Name())
|
|
|
|
exportCmd := exporter.NewExportCmd(os.Stdout, os.Stderr)
|
|
exportCmd.SetArgs([]string{"--output-format=json", "--yes", "--controller-url=" + url, "--username=admin", "--password=admin", "--output-file=" + tempFile.Name(), "all"})
|
|
err = exportCmd.Execute()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
result, err := os.ReadFile(tempFile.Name())
|
|
if err != nil {
|
|
t.Fatalf("Error reading file: %v", err)
|
|
}
|
|
sresult := string(result)
|
|
log.Infof("export result: %s", sresult)
|
|
|
|
doc, err := jsonquery.Parse(strings.NewReader(sresult))
|
|
if err != nil {
|
|
t.Fatalf("error parsing json: %v", err)
|
|
}
|
|
|
|
assert.NotEqual(t, 0, len(doc.ChildNodes()))
|
|
if len(doc.ChildNodes()) == 0 {
|
|
// no data, nothing to test
|
|
return
|
|
}
|
|
|
|
externalJwtSigner1 := jsonquery.FindOne(doc, "//externalJwtSigners/*[name='NetFoundry Console Integration External JWT Signer']")
|
|
assert.NotNil(t, externalJwtSigner1)
|
|
assert.Equal(t, "https://gateway.staging.netfoundry.io/network-auth/v1/public/.well-known/NYFw7IGJKNP9AaG45iwCj/jwks.json", jsonquery.FindOne(externalJwtSigner1, "/jwksEndpoint").Value())
|
|
assert.Equal(t, "https://gateway.staging.netfoundry.io/cloudzt/25ba1aa3-4468-445a-910e-93f5b425f2c1", jsonquery.FindOne(externalJwtSigner1, "/audience").Value())
|
|
|
|
authPolicy1 := jsonquery.FindOne(doc, "//authPolicies/*[name='NetFoundry Console Integration Auth Policy']")
|
|
assert.NotNil(t, authPolicy1)
|
|
assert.Equal(t, "@NetFoundry Console Integration External JWT Signer", jsonquery.FindOne(authPolicy1, "/primary/extJwt/allowedSigners/*[1]").Value())
|
|
authPolicy2 := jsonquery.FindOne(doc, "//authPolicies/*[name='Test123']")
|
|
assert.NotNil(t, authPolicy2)
|
|
assert.True(t, jsonquery.FindOne(authPolicy2, "/primary/updb/allowed").Value().(bool))
|
|
authPolicy3 := jsonquery.FindOne(doc, "//authPolicies/*[name='ott+secondary']")
|
|
assert.NotNil(t, authPolicy3)
|
|
assert.True(t, jsonquery.FindOne(authPolicy3, "/primary/cert/allowed").Value().(bool))
|
|
assert.False(t, jsonquery.FindOne(authPolicy3, "/primary/extJwt/allowed").Value().(bool))
|
|
assert.False(t, jsonquery.FindOne(authPolicy3, "/primary/updb/allowed").Value().(bool))
|
|
assert.Equal(t, "@Auth0a", jsonquery.FindOne(authPolicy3, "/secondary/requireExtJwtSigner").Value().(string))
|
|
assert.False(t, jsonquery.FindOne(authPolicy3, "/secondary/requireTotp").Value().(bool))
|
|
|
|
identity1 := jsonquery.FindOne(doc, "//identities/*[externalId='f1505b76-38ec-470b-9819-75984623c23d']")
|
|
assert.NotNil(t, identity1)
|
|
assert.Equal(t, "Vinay Lakshmaiah", jsonquery.FindOne(identity1, "/name").Value())
|
|
assert.Empty(t, jsonquery.FindOne(identity1, "/roleAttributes").Value())
|
|
assert.Equal(t, "@NetFoundry Console Integration Auth Policy", jsonquery.FindOne(identity1, "/authPolicy").Value())
|
|
identity2 := jsonquery.FindOne(doc, "//identities/*[name='public-router1']")
|
|
assert.NotNil(t, identity2)
|
|
assert.NotEmpty(t, jsonquery.FindOne(identity2, "/roleAttributes").Value())
|
|
assert.Equal(t, "ident-attr-1", jsonquery.FindOne(identity2, "/roleAttributes/*[1]").Value())
|
|
assert.Equal(t, "ident-attr-2", jsonquery.FindOne(identity2, "/roleAttributes/*[2]").Value())
|
|
identity3 := jsonquery.FindOne(doc, "//identities/*[name='Admin-Registered']")
|
|
assert.NotNil(t, identity3)
|
|
assert.NotEmpty(t, jsonquery.FindOne(identity3, "/roleAttributes").Value())
|
|
assert.Equal(t, "attr1", jsonquery.FindOne(identity3, "/roleAttributes/*[1]").Value())
|
|
|
|
config1 := jsonquery.FindOne(doc, "//configs/*[name='service2-intercept-config']")
|
|
assert.NotNil(t, config1)
|
|
assert.Equal(t, "@intercept.v1", jsonquery.FindOne(config1, "/configType").Value())
|
|
config2 := jsonquery.FindOne(doc, "//configs/*[name='ssssimple-intercept-config']")
|
|
assert.NotNil(t, config2)
|
|
assert.Equal(t, "@intercept.v1", jsonquery.FindOne(config2, "/configType").Value())
|
|
config3 := jsonquery.FindOne(doc, "//configs/*[name='test-123-host-config']")
|
|
assert.NotNil(t, config3)
|
|
assert.Equal(t, "@host.v1", jsonquery.FindOne(config3, "/configType").Value())
|
|
config4 := jsonquery.FindOne(doc, "//configs/*[name='service1-host-config']")
|
|
assert.NotNil(t, config4)
|
|
assert.Equal(t, "@host.v1", jsonquery.FindOne(config4, "/configType").Value())
|
|
|
|
postureCheck1 := jsonquery.FindOne(doc, "//postureChecks/*[name='Mac']")
|
|
assert.NotNil(t, postureCheck1)
|
|
assert.Equal(t, "MAC", jsonquery.FindOne(postureCheck1, "/typeId").Value())
|
|
assert.Equal(t, "0123456789ab", jsonquery.FindOne(postureCheck1, "/macAddresses/*[1]").Value())
|
|
assert.Equal(t, "mac", jsonquery.FindOne(postureCheck1, "/roleAttributes/*[1]").Value())
|
|
postureCheck2 := jsonquery.FindOne(doc, "//postureChecks/*[name='MFA']")
|
|
assert.NotNil(t, postureCheck2)
|
|
assert.Equal(t, "MFA", jsonquery.FindOne(postureCheck2, "/typeId").Value())
|
|
assert.Equal(t, "mfa", jsonquery.FindOne(postureCheck2, "/roleAttributes/*[1]").Value())
|
|
postureCheck3 := jsonquery.FindOne(doc, "//postureChecks/*[name='Process']")
|
|
assert.NotNil(t, postureCheck3)
|
|
assert.Equal(t, "PROCESS", jsonquery.FindOne(postureCheck3, "/typeId").Value())
|
|
assert.Equal(t, "Linux", jsonquery.FindOne(postureCheck3, "/process/osType").Value())
|
|
assert.Equal(t, "/path/something", jsonquery.FindOne(postureCheck3, "/process/path").Value())
|
|
assert.Empty(t, jsonquery.Find(postureCheck3, "/process/hashes/*[1]"))
|
|
assert.Equal(t, "process", jsonquery.FindOne(postureCheck3, "/roleAttributes/*[1]").Value())
|
|
|
|
router1 := jsonquery.FindOne(doc, "//edgeRouters/*[name='custroutet2']")
|
|
assert.NotNil(t, router1)
|
|
assert.Equal(t, "vis-bind", jsonquery.FindOne(router1, "/roleAttributes/*[1]").Value())
|
|
router2 := jsonquery.FindOne(doc, "//edgeRouters/*[name='asd']")
|
|
assert.NotNil(t, router2)
|
|
assert.Empty(t, jsonquery.Find(router2, "/roleAttributes/*[1]"))
|
|
router3 := jsonquery.FindOne(doc, "//edgeRouters/*[name='public-router1']")
|
|
assert.NotNil(t, router3)
|
|
assert.Equal(t, "public", jsonquery.FindOne(router3, "/roleAttributes/*[1]").Value())
|
|
router4 := jsonquery.FindOne(doc, "//edgeRouters/*[name='enroll']")
|
|
assert.NotNil(t, router4)
|
|
assert.Empty(t, jsonquery.FindOne(router4, "/roleAttributes").Value())
|
|
router5 := jsonquery.FindOne(doc, "//edgeRouters/*[name='nfhosted']")
|
|
assert.NotNil(t, router5)
|
|
assert.Equal(t, "public", jsonquery.FindOne(router5, "/roleAttributes/*[1]").Value())
|
|
router6 := jsonquery.FindOne(doc, "//edgeRouters/*[name='appdata']")
|
|
assert.NotNil(t, router6)
|
|
assert.Empty(t, jsonquery.FindOne(router6, "/roleAttributes").Value())
|
|
assert.Equal(t, "er", jsonquery.FindOne(router6, "/appData/my").Value())
|
|
router7 := jsonquery.FindOne(doc, "//edgeRouters/*[name='vis-customer-router']")
|
|
assert.NotNil(t, router7)
|
|
assert.Equal(t, "vis-bind", jsonquery.FindOne(router7, "/roleAttributes/*").Value())
|
|
|
|
serviceRouterPolicy1 := jsonquery.FindOne(doc, "//serviceEdgeRouterPolicies/*[name='ssep2']")
|
|
assert.NotNil(t, serviceRouterPolicy1)
|
|
assert.Equal(t, "@custroutet2", jsonquery.FindOne(serviceRouterPolicy1, "/edgeRouterRoles/*[1]").Value())
|
|
assert.Equal(t, "@ssssimple", jsonquery.FindOne(serviceRouterPolicy1, "/serviceRoles/*[1]").Value())
|
|
serviceRouterPolicy2 := jsonquery.FindOne(doc, "//serviceEdgeRouterPolicies/*[name='sep1']")
|
|
assert.NotNil(t, serviceRouterPolicy2)
|
|
assert.Equal(t, "@public-router1", jsonquery.FindOne(serviceRouterPolicy2, "/edgeRouterRoles/*[1]").Value())
|
|
assert.Equal(t, "@ssssimple", jsonquery.FindOne(serviceRouterPolicy2, "/serviceRoles/*[1]").Value())
|
|
|
|
servicePolicy1 := jsonquery.FindOne(doc, "//servicePolicies/*[name='ssssimple-bind-policy']")
|
|
assert.NotNil(t, servicePolicy1)
|
|
assert.Equal(t, "@public-router1", jsonquery.FindOne(servicePolicy1, "/identityRoles/*[1]").Value())
|
|
assert.Equal(t, "@ssssimple", jsonquery.FindOne(servicePolicy1, "/serviceRoles/*[1]").Value())
|
|
assert.Equal(t, "Bind", jsonquery.FindOne(servicePolicy1, "/type").Value())
|
|
servicePolicy2 := jsonquery.FindOne(doc, "//servicePolicies/*[name='ssssimple-dial-policy']")
|
|
assert.NotNil(t, servicePolicy2)
|
|
assert.Equal(t, "@identity12", jsonquery.FindOne(servicePolicy2, "/identityRoles/*[1]").Value())
|
|
assert.Equal(t, "@ssssimple", jsonquery.FindOne(servicePolicy2, "/serviceRoles/*[1]").Value())
|
|
assert.Equal(t, "Dial", jsonquery.FindOne(servicePolicy2, "/type").Value())
|
|
|
|
routerPolicy1 := jsonquery.FindOne(doc, "//edgeRouterPolicies/*[name='routerpolicy1']")
|
|
assert.NotNil(t, routerPolicy1)
|
|
assert.Equal(t, "@public-router1", jsonquery.FindOne(routerPolicy1, "/edgeRouterRoles/*[1]").Value())
|
|
assert.Equal(t, "@identity12", jsonquery.FindOne(routerPolicy1, "/identityRoles/*[1]").Value())
|
|
routerPolicy2 := jsonquery.FindOne(doc, "//edgeRouterPolicies/*[name='edge-router-D98X8WmjYH-system']")
|
|
assert.NotNil(t, routerPolicy2)
|
|
assert.Equal(t, "@custroutet2", jsonquery.FindOne(routerPolicy2, "/edgeRouterRoles/*[1]").Value())
|
|
assert.Equal(t, "@custroutet2", jsonquery.FindOne(routerPolicy2, "/identityRoles/*[1]").Value())
|
|
|
|
service1 := jsonquery.FindOne(doc, "//services/*[name='ssssimple']")
|
|
assert.NotNil(t, service1)
|
|
assert.Equal(t, "abcd", jsonquery.FindOne(service1, "/roleAttributes/*[1]").Value())
|
|
assert.Equal(t, "service", jsonquery.FindOne(service1, "/roleAttributes/*[2]").Value())
|
|
configs1 := []string{}
|
|
for _, node := range jsonquery.Find(service1, "/configs/*") {
|
|
configs1 = append(configs1, node.Value().(string))
|
|
}
|
|
assert.Contains(t, configs1, "@ssssimple-intercept-config")
|
|
assert.Contains(t, configs1, "@ssssimple-host-config")
|
|
service2 := jsonquery.FindOne(doc, "//services/*[name='asdfasdf']")
|
|
assert.NotNil(t, service2)
|
|
assert.Equal(t, "bcde", jsonquery.FindOne(service2, "/roleAttributes/*[1]").Value())
|
|
assert.Empty(t, jsonquery.Find(service2, "/configs/*"))
|
|
|
|
}
|
|
|
|
func performServiceAndConfigTest(t *testing.T, url string) {
|
|
|
|
// Create a temporary file in the default temporary directory
|
|
tempFile, err := os.CreateTemp("", "ascode-output-*.json")
|
|
if err != nil {
|
|
t.Fatalf("error creating temp file: %v", err)
|
|
}
|
|
defer func() { _ = os.Remove(tempFile.Name()) }()
|
|
log.Info("output file: ", tempFile.Name())
|
|
|
|
exportCmd := exporter.NewExportCmd(os.Stdout, os.Stderr)
|
|
exportCmd.SetArgs([]string{"--output-format=json", "--yes", "--controller-url=" + url, "--username=admin", "--password=admin", "--output-file=" + tempFile.Name(), "service,config"})
|
|
err = exportCmd.Execute()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
result, err := os.ReadFile(tempFile.Name())
|
|
if err != nil {
|
|
t.Fatalf("Error reading file: %v", err)
|
|
}
|
|
sresult := string(result)
|
|
log.Infof("export result: %s", sresult)
|
|
|
|
doc, err := jsonquery.Parse(strings.NewReader(sresult))
|
|
if err != nil {
|
|
t.Fatalf("error parsing json: %v", err)
|
|
}
|
|
|
|
assert.NotEqual(t, 0, len(doc.ChildNodes()))
|
|
if len(doc.ChildNodes()) == 0 {
|
|
// no data, nothing to test
|
|
return
|
|
}
|
|
|
|
config1 := jsonquery.FindOne(doc, "//configs/*[name='service2-intercept-config']")
|
|
assert.NotNil(t, config1)
|
|
assert.Equal(t, "@intercept.v1", jsonquery.FindOne(config1, "/configType").Value())
|
|
config2 := jsonquery.FindOne(doc, "//configs/*[name='ssssimple-intercept-config']")
|
|
assert.NotNil(t, config2)
|
|
assert.Equal(t, "@intercept.v1", jsonquery.FindOne(config2, "/configType").Value())
|
|
config3 := jsonquery.FindOne(doc, "//configs/*[name='test-123-host-config']")
|
|
assert.NotNil(t, config3)
|
|
assert.Equal(t, "@host.v1", jsonquery.FindOne(config3, "/configType").Value())
|
|
config4 := jsonquery.FindOne(doc, "//configs/*[name='service1-host-config']")
|
|
assert.NotNil(t, config4)
|
|
assert.Equal(t, "@host.v1", jsonquery.FindOne(config4, "/configType").Value())
|
|
|
|
service1 := jsonquery.FindOne(doc, "//services/*[name='ssssimple']")
|
|
assert.NotNil(t, service1)
|
|
assert.Equal(t, "abcd", jsonquery.FindOne(service1, "/roleAttributes/*[1]").Value())
|
|
assert.Equal(t, "service", jsonquery.FindOne(service1, "/roleAttributes/*[2]").Value())
|
|
configs1 := []string{}
|
|
for _, node := range jsonquery.Find(service1, "/configs/*") {
|
|
configs1 = append(configs1, node.Value().(string))
|
|
}
|
|
assert.Contains(t, configs1, "@ssssimple-intercept-config")
|
|
assert.Contains(t, configs1, "@ssssimple-host-config")
|
|
service2 := jsonquery.FindOne(doc, "//services/*[name='asdfasdf']")
|
|
assert.NotNil(t, service2)
|
|
assert.Equal(t, "bcde", jsonquery.FindOne(service2, "/roleAttributes/*[1]").Value())
|
|
assert.Empty(t, jsonquery.Find(service2, "/configs/*"))
|
|
|
|
}
|
|
|
|
func performIdentitiesTest(t *testing.T, url string) {
|
|
|
|
// Create a temporary file in the default temporary directory
|
|
tempFile, err := os.CreateTemp("", "ascode-output-*.json")
|
|
if err != nil {
|
|
t.Fatalf("error creating temp file: %v", err)
|
|
}
|
|
defer func() { _ = os.Remove(tempFile.Name()) }()
|
|
log.Info("output file: ", tempFile.Name())
|
|
|
|
exportCmd := exporter.NewExportCmd(os.Stdout, os.Stderr)
|
|
exportCmd.SetArgs([]string{"--output-format=json", "--yes", "--controller-url=" + url, "--username=admin", "--password=admin", "--output-file=" + tempFile.Name(), "identity"})
|
|
err = exportCmd.Execute()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
result, err := os.ReadFile(tempFile.Name())
|
|
if err != nil {
|
|
t.Fatalf("Error reading file: %v", err)
|
|
}
|
|
sresult := string(result)
|
|
log.Infof("export result: %s", sresult)
|
|
|
|
doc, err := jsonquery.Parse(strings.NewReader(sresult))
|
|
if err != nil {
|
|
t.Fatalf("error parsing json: %v", err)
|
|
}
|
|
|
|
assert.NotEqual(t, 0, len(doc.ChildNodes()))
|
|
if len(doc.ChildNodes()) == 0 {
|
|
// no data, nothing to test
|
|
return
|
|
}
|
|
|
|
identity1 := jsonquery.FindOne(doc, "//identities/*[externalId='f1505b76-38ec-470b-9819-75984623c23d']")
|
|
assert.NotNil(t, identity1)
|
|
assert.Equal(t, "Vinay Lakshmaiah", jsonquery.FindOne(identity1, "/name").Value())
|
|
assert.Empty(t, jsonquery.FindOne(identity1, "/roleAttributes").Value())
|
|
assert.Equal(t, "@NetFoundry Console Integration Auth Policy", jsonquery.FindOne(identity1, "/authPolicy").Value())
|
|
|
|
identity2 := jsonquery.FindOne(doc, "//identities/*[externalId='962818be-b8d5-4c37-8e5b-e5082aa4ddbf']")
|
|
assert.NotNil(t, identity2)
|
|
assert.Equal(t, "harish donepudi", jsonquery.FindOne(identity2, "/name").Value())
|
|
assert.Empty(t, jsonquery.FindOne(identity2, "/roleAttributes").Value())
|
|
assert.Equal(t, "@NetFoundry Console Integration Auth Policy", jsonquery.FindOne(identity2, "/authPolicy").Value())
|
|
|
|
}
|