|
|
|
@ -5,13 +5,13 @@ import (
|
|
|
|
|
"strings"
|
|
|
|
|
"testing"
|
|
|
|
|
|
|
|
|
|
"github.com/hashicorp/consul/agent"
|
|
|
|
|
"github.com/hashicorp/consul/api"
|
|
|
|
|
"github.com/hashicorp/consul/sdk/testutil/retry"
|
|
|
|
|
"github.com/hashicorp/consul/testrpc"
|
|
|
|
|
"github.com/mitchellh/cli"
|
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
|
|
|
|
|
|
"github.com/hashicorp/consul/agent"
|
|
|
|
|
"github.com/hashicorp/consul/api"
|
|
|
|
|
"github.com/hashicorp/consul/testrpc"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
func TestTokenUpdateCommand_noTabs(t *testing.T) {
|
|
|
|
@ -57,17 +57,6 @@ func TestTokenUpdateCommand(t *testing.T) {
|
|
|
|
|
)
|
|
|
|
|
require.NoError(t, err)
|
|
|
|
|
|
|
|
|
|
// create a legacy token
|
|
|
|
|
// nolint: staticcheck // we have to use the deprecated API to create a legacy token
|
|
|
|
|
legacyTokenSecretID, _, err := client.ACL().Create(&api.ACLEntry{
|
|
|
|
|
Name: "Legacy token",
|
|
|
|
|
Type: "client",
|
|
|
|
|
Rules: "service \"test\" { policy = \"write\" }",
|
|
|
|
|
},
|
|
|
|
|
&api.WriteOptions{Token: "root"},
|
|
|
|
|
)
|
|
|
|
|
require.NoError(t, err)
|
|
|
|
|
|
|
|
|
|
// We fetch the legacy token later to give server time to async background
|
|
|
|
|
// upgrade it.
|
|
|
|
|
|
|
|
|
@ -160,36 +149,6 @@ func TestTokenUpdateCommand(t *testing.T) {
|
|
|
|
|
|
|
|
|
|
require.Equal(t, "test token", token.Description)
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// Need legacy token now, hopefully server had time to generate an accessor ID
|
|
|
|
|
// in the background but wait for it if not.
|
|
|
|
|
var legacyToken *api.ACLToken
|
|
|
|
|
retry.Run(t, func(r *retry.R) {
|
|
|
|
|
// Fetch the legacy token via new API so we can use it's accessor ID
|
|
|
|
|
legacyToken, _, err = client.ACL().TokenReadSelf(
|
|
|
|
|
&api.QueryOptions{Token: legacyTokenSecretID})
|
|
|
|
|
require.NoError(r, err)
|
|
|
|
|
require.NotEmpty(r, legacyToken.AccessorID)
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// upgrade legacy token should replace rules and leave token in a "new" state!
|
|
|
|
|
t.Run("legacy-upgrade", func(t *testing.T) {
|
|
|
|
|
token := run(t, []string{
|
|
|
|
|
"-http-addr=" + a.HTTPAddr(),
|
|
|
|
|
"-id=" + legacyToken.AccessorID,
|
|
|
|
|
"-token=root",
|
|
|
|
|
"-policy-name=" + policy.Name,
|
|
|
|
|
"-upgrade-legacy",
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// Description shouldn't change
|
|
|
|
|
require.Equal(t, "Legacy token", token.Description)
|
|
|
|
|
require.Len(t, token.Policies, 1)
|
|
|
|
|
// Rules should now be empty meaning this is no longer a legacy token
|
|
|
|
|
require.Empty(t, token.Rules)
|
|
|
|
|
// Secret should not have changes
|
|
|
|
|
require.Equal(t, legacyToken.SecretID, token.SecretID)
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestTokenUpdateCommand_JSON(t *testing.T) {
|
|
|
|
|