73 lines
1.7 KiB
Go
73 lines
1.7 KiB
Go
// Copyright 2023 the Pinniped contributors. All Rights Reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package downstreamsession
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"go.pinniped.dev/internal/testutil/oidctestutil"
|
|
)
|
|
|
|
func TestMapAdditionalClaimsFromUpstreamIDToken(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
additionalClaimMappings map[string]string
|
|
upstreamClaims map[string]interface{}
|
|
wantClaims map[string]interface{}
|
|
}{
|
|
{
|
|
name: "happy path",
|
|
additionalClaimMappings: map[string]string{
|
|
"email": "notification_email",
|
|
},
|
|
upstreamClaims: map[string]interface{}{
|
|
"notification_email": "test@example.com",
|
|
},
|
|
wantClaims: map[string]interface{}{
|
|
"email": "test@example.com",
|
|
},
|
|
},
|
|
{
|
|
name: "missing",
|
|
additionalClaimMappings: map[string]string{
|
|
"email": "email",
|
|
},
|
|
upstreamClaims: map[string]interface{}{},
|
|
wantClaims: map[string]interface{}{},
|
|
},
|
|
{
|
|
name: "complex",
|
|
additionalClaimMappings: map[string]string{
|
|
"complex": "complex",
|
|
},
|
|
upstreamClaims: map[string]interface{}{
|
|
"complex": map[string]string{
|
|
"subClaim": "subValue",
|
|
},
|
|
},
|
|
wantClaims: map[string]interface{}{
|
|
"complex": map[string]string{
|
|
"subClaim": "subValue",
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
test := test
|
|
t.Run(test.name, func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
idp := oidctestutil.NewTestUpstreamOIDCIdentityProviderBuilder().
|
|
WithAdditionalClaimMappings(test.additionalClaimMappings).
|
|
Build()
|
|
actual := MapAdditionalClaimsFromUpstreamIDToken(idp, test.upstreamClaims)
|
|
|
|
require.Equal(t, test.wantClaims, actual)
|
|
})
|
|
}
|
|
}
|