workaround for #263 #266

.github/workflows/build.yaml

@@ -15,7 +15,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        pingfederate-version: [ 10.2.7, 10.3.7, 11.0.4, 11.1.1 ]
+        pingfederate-version: [ 10.2.7, 10.3.7, 11.0.4, 11.1.1, 11.2.0 ]
     services:
       ldap:
         image: osixia/openldap:1.5.0

internal/framework/pingfederate_oauth_client.go

@@ -3,6 +3,7 @@ package framework
 import (
 	"context"
 	"fmt"
+	"math/big"
 
 	"github.com/hashicorp/terraform-plugin-framework/attr"
 
@@ -372,6 +373,12 @@ func (r *pingfederateOAuthClientResource) versionResponseModifier(data *ClientDa
 		data.RequireJwtSecuredAuthorizationResponseMode = types.BoolValue(false)
 	}
 
+	// depending on the backing store for oauth clients, the following fields may be null
+	// if they are null, we need to set them to 0 so that the state is happy
+	if data.PersistentGrantExpirationTime.IsNull() {
+		data.PersistentGrantExpirationTime = types.NumberValue(big.NewFloat(0))
+	}
+
 	return data
 }
 

internal/framework/pingfederate_oauth_client_test.go

@@ -3,6 +3,7 @@ package framework
 import (
 	"context"
 	"fmt"
+	"math/big"
 	"testing"
 
 	"github.com/hashicorp/terraform-plugin-framework/attr"
@@ -776,8 +777,9 @@ func Test_resourcePingFederateOAuthClientResourceVersionModifications(t *testing
 			before := defaults
 			res.versionRequestModifier(&before)
 			assert.Equal(t, tt.after, before)
-
-			assert.Equal(t, defaults, *res.versionResponseModifier(&before))
+			defaultsCopy := defaults
+			defaultsCopy.PersistentGrantExpirationTime = types.NumberValue(big.NewFloat(0))
+			assert.Equal(t, defaultsCopy, *res.versionResponseModifier(&before))
 		})
 	}
 }