c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
68 lines
2.0 KiB
Go
68 lines
2.0 KiB
Go
// Copyright © 2025 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package oidc
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/ory/kratos/identity"
|
|
"github.com/ory/x/region"
|
|
)
|
|
|
|
func TestSetRegion(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
t.Run("case=sets region from mapper output", func(t *testing.T) {
|
|
t.Parallel()
|
|
i := &identity.Identity{}
|
|
evaluated := `{"identity": {"region": "eu-central", "traits": {"subject": "alice@example.com"}}}`
|
|
require.NoError(t, setRegion(evaluated, i))
|
|
assert.Equal(t, region.EUCentral, i.Region)
|
|
})
|
|
|
|
t.Run("case=leaves region empty when mapper output omits region", func(t *testing.T) {
|
|
t.Parallel()
|
|
i := &identity.Identity{}
|
|
evaluated := `{"identity": {"traits": {"subject": "alice@example.com"}}}`
|
|
require.NoError(t, setRegion(evaluated, i))
|
|
assert.Equal(t, region.Region(""), i.Region)
|
|
})
|
|
|
|
t.Run("case=rejects empty region", func(t *testing.T) {
|
|
t.Parallel()
|
|
i := &identity.Identity{}
|
|
evaluated := `{"identity": {"region": "", "traits": {"subject": "alice@example.com"}}}`
|
|
err := setRegion(evaluated, i)
|
|
require.Error(t, err)
|
|
})
|
|
|
|
t.Run("case=rejects unknown region value", func(t *testing.T) {
|
|
t.Parallel()
|
|
i := &identity.Identity{}
|
|
evaluated := `{"identity": {"region": "not-a-region", "traits": {"subject": "alice@example.com"}}}`
|
|
err := setRegion(evaluated, i)
|
|
require.Error(t, err)
|
|
assert.Equal(t, region.Region(""), i.Region)
|
|
})
|
|
|
|
t.Run("case=rejects non-string region", func(t *testing.T) {
|
|
t.Parallel()
|
|
i := &identity.Identity{}
|
|
evaluated := `{"identity": {"region": 42, "traits": {"subject": "alice@example.com"}}}`
|
|
err := setRegion(evaluated, i)
|
|
require.Error(t, err)
|
|
})
|
|
|
|
t.Run("case=accepts super-region", func(t *testing.T) {
|
|
t.Parallel()
|
|
i := &identity.Identity{}
|
|
evaluated := `{"identity": {"region": "eu", "traits": {"subject": "alice@example.com"}}}`
|
|
require.NoError(t, setRegion(evaluated, i))
|
|
assert.Equal(t, region.EU, i.Region)
|
|
})
|
|
}
|