use of com.yahoo.athenz.zts.store.MockCloudStore in project athenz by yahoo.
the class ZTSImplTest method testGetAWSTemporaryCredentials.
@Test
public void testGetAWSTemporaryCredentials() {
Principal principal = SimplePrincipal.create("user_domain", "user101", "v=U1;d=user_domain;n=user101;s=signature", 0, null);
CloudStore cloudStore = new MockCloudStore();
((MockCloudStore) cloudStore).setMockFields("1234", "aws_role_name", "user_domain.user101");
store.setCloudStore(cloudStore);
zts.cloudStore = cloudStore;
SignedDomain signedDomain = createAwsSignedDomain("athenz.product", "1234");
store.processDomain(signedDomain, false);
AWSTemporaryCredentials creds = zts.getAWSTemporaryCredentials(createResourceContext(principal), "athenz.product", "aws_role_name");
assertNotNull(creds);
try {
((MockCloudStore) cloudStore).setMockFields("1234", "aws_role2_name", "user_domain.user101");
zts.getAWSTemporaryCredentials(createResourceContext(principal), "athenz.product", "aws_role_name");
fail();
} catch (ResourceException ex) {
assertEquals(ex.getCode(), 400);
}
}
use of com.yahoo.athenz.zts.store.MockCloudStore in project athenz by yahoo.
the class ZTSImplTest method testGetAWSTemporaryCredentialsNoAwsAccount.
@Test
public void testGetAWSTemporaryCredentialsNoAwsAccount() {
Principal principal = SimplePrincipal.create("user_domain", "user101", "v=U1;d=user_domain;n=user101;s=signature", 0, null);
CloudStore cloudStore = new MockCloudStore();
store.setCloudStore(cloudStore);
zts.cloudStore = cloudStore;
SignedDomain signedDomain = createAwsSignedDomain("athenz.product", null);
store.processDomain(signedDomain, false);
try {
zts.getAWSTemporaryCredentials(createResourceContext(principal), "athenz.product", "aws_role_name");
fail();
} catch (ResourceException ex) {
assertEquals(ex.getCode(), 400);
}
}
use of com.yahoo.athenz.zts.store.MockCloudStore in project athenz by yahoo.
the class ZTSImplTest method testGetRoleTokenCert.
@Test
public void testGetRoleTokenCert() throws Exception {
// this csr is for sports:role.readers role
RoleCertificateRequest req = new RoleCertificateRequest().setCsr(ROLE_CERT_CORETECH_REQUEST).setExpiryTime(Long.valueOf(3600));
SignedDomain signedDomain = createSignedDomain("coretech", "weather", "storage", true);
store.processDomain(signedDomain, false);
File caCert = new File("src/test/resources/valid_cn_x509.cert");
X509Certificate caCertificate = Crypto.loadX509Certificate(caCert);
File caKey = new File("src/test/resources/private_encrypted.key");
PrivateKey caPrivateKey = Crypto.loadPrivateKey(caKey, "athenz");
CertSigner certSigner = new SelfCertSigner(caPrivateKey, caCertificate);
CloudStore cloudStore = new MockCloudStore(certSigner);
store.setCloudStore(cloudStore);
zts.cloudStore = cloudStore;
Principal principal = SimplePrincipal.create("user_domain", "user1", "v=U1;d=user_domain;n=user;s=signature", 0, null);
ResourceContext context = createResourceContext(principal);
RoleToken roleToken = zts.postRoleCertificateRequest(context, "coretech", "readers", req);
assertNotNull(roleToken);
assertEquals(roleToken.getExpiryTime(), TimeUnit.SECONDS.convert(30, TimeUnit.DAYS));
}
Aggregations