saml2aws/cloud_role_test.go at master · devsisters/saml2aws · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
package saml2aws

import (
	"testing"

	"github.com/stretchr/testify/assert"
)

func TestParseRoles(t *testing.T) {

	roles := []string{
		"arn:aws:iam::456456456456:saml-provider/example-idp,arn:aws:iam::456456456456:role/admin",
		"arn:aws:iam::456456456456:role/admin,arn:aws:iam::456456456456:saml-provider/example-idp",
	}

	awsRoles, err := ParseCloudRoles(roles, "AWS")

	assert.Nil(t, err)
	assert.Len(t, awsRoles, 2)

	for _, awsRole := range awsRoles {
		assert.Equal(t, "arn:aws:iam::456456456456:saml-provider/example-idp", awsRole.PrincipalARN)
		assert.Equal(t, "arn:aws:iam::456456456456:role/admin", awsRole.RoleARN)
	}

	roles = []string{""}
	awsRoles, err = ParseCloudRoles(roles, "AWS")

	assert.NotNil(t, err)
	assert.Nil(t, awsRoles)

	// TencentCloud Roles
	roles = []string{
		"qcs::cam::uin/888888888888:roleName/dage,qcs::cam::uin/888888888888:saml-provider/example-provider-idp",
		"qcs::cam::uin/888888888888:saml-provider/example-provider-idp,qcs::cam::uin/888888888888:roleName/dage",
	}

	tencentcloudRoles, err := ParseCloudRoles(roles, "TencentCloud")

	assert.Nil(t, err)
	assert.Len(t, tencentcloudRoles, 2)

	for _, tencentcloudRole := range tencentcloudRoles {
		assert.Equal(t, "qcs::cam::uin/888888888888:saml-provider/example-provider-idp", tencentcloudRole.PrincipalARN)
		assert.Equal(t, "qcs::cam::uin/888888888888:roleName/dage", tencentcloudRole.RoleARN)
	}

	roles = []string{""}
	tencentcloudRoles, err = ParseCloudRoles(roles, "TencentCloud")

	assert.NotNil(t, err)
	assert.Nil(t, tencentcloudRoles)

}