Verify end_session_endpoint set on oauth_providers

rabbitmq · May 22, 2024 · 9fef822 · 9fef822
1 parent a36a666
commit 9fef822
Showing 1 changed file with 40 additions and 8 deletions.
diff --git a/deps/rabbitmq_management/test/rabbit_mgmt_wm_auth_SUITE.erl b/deps/rabbitmq_management/test/rabbit_mgmt_wm_auth_SUITE.erl
@@ -103,8 +103,26 @@ groups() ->
             {with_oauth_enabled, [], [
               {with_mgt_oauth_client_id_z, [], [ 
                 should_not_return_end_session_endpoint,
-                {with_end_session_endpoint, [], [
-                  should_return_end_session_endpoint
+                {with_root_end_session_endpoint_0, [], [
+                  should_return_end_session_endpoint_0
+                ]}
+              ]}
+            ]}
+          ]},
+          {with_oauth_providers_idp1_idp2, [], [
+            {with_default_oauth_provider_idp1, [], [
+              {with_oauth_enabled, [], [                
+                {with_mgt_oauth_client_id_z, [], [
+                  should_not_return_end_session_endpoint,
+                  {with_end_session_endpoint_for_idp1_1, [], [
+                    should_return_end_session_endpoint_1
+                  ]},
+                  {with_root_end_session_endpoint_0, [], [
+                    should_not_return_end_session_endpoint,
+                    {with_end_session_endpoint_for_idp1_1, [], [
+                      should_return_end_session_endpoint_1
+                    ]}
+                  ]}
                 ]}
               ]}
             ]}
@@ -252,7 +270,8 @@ init_per_suite(Config) ->
     {idp3_url, <<"https://idp3">>},
     {url0, <<"https://url0">>},
     {url1, <<"https://url1">>},
-    {logout_url, <<"https://logoug">>},
+    {logout_url_0, <<"https://logout_0">>},
+    {logout_url_1, <<"https://logout_1">>},
     {a, <<"a">>},
     {b, <<"b">>},
     {q, <<"q">>},
@@ -345,8 +364,12 @@ init_per_group(with_default_oauth_provider_idp1, Config) ->
 init_per_group(with_default_oauth_provider_idp3, Config) ->
   application:set_env(rabbitmq_auth_backend_oauth2, default_oauth_provider, ?config(idp3, Config)),
   Config;
-init_per_group(with_end_session_endpoint, Config) ->
-  application:set_env(rabbitmq_auth_backend_oauth2, end_session_endpoint, ?config(logout_url, Config)),
+init_per_group(with_root_end_session_endpoint_0, Config) ->
+  application:set_env(rabbitmq_auth_backend_oauth2, end_session_endpoint, ?config(logout_url_0, Config)),
+  Config;
+init_per_group(with_end_session_endpoint_for_idp1_1, Config) ->
+  set_attribute_in_entry_for_env_variable(rabbitmq_auth_backend_oauth2, oauth_providers,
+    ?config(idp1, Config), end_session_endpoint, ?config(logout_url_1, Config)),
   Config;
 
 init_per_group(_, Config) ->
@@ -429,9 +452,13 @@ end_per_group(with_default_oauth_provider_idp1, Config) ->
 end_per_group(with_default_oauth_provider_idp3, Config) ->
   application:unset_env(rabbitmq_auth_backend_oauth2, default_oauth_provider),
   Config;
-end_per_group(with_end_session_endpoint, Config) ->
+end_per_group(with_root_end_session_endpoint_0, Config) ->
   application:unset_env(rabbitmq_auth_backend_oauth2, end_session_endpoint),
   Config;
+end_per_group(with_end_session_endpoint_for_idp1_1, Config) ->
+  remove_attribute_from_entry_from_env_variable(rabbitmq_auth_backend_oauth2, oauth_providers,
+    ?config(idp1, Config), end_session_endpoint),
+  Config;
 end_per_group(_, Config) ->
   Config.
 
@@ -561,10 +588,15 @@ should_not_return_end_session_endpoint(Config) ->
   assert_attribute_not_defined_for_oauth_resource_server(rabbit_mgmt_wm_auth:authSettings(),
     Config, rabbit, end_session_endpoint).
 
-should_return_end_session_endpoint(Config) ->
+should_return_end_session_endpoint_0(Config) ->
+  ct:log("settings: ~p", [rabbit_mgmt_wm_auth:authSettings()]),
+  assertEqual_on_attribute_for_oauth_resource_server(rabbit_mgmt_wm_auth:authSettings(),
+    Config, rabbit, end_session_endpoint, ?config(logout_url_0, Config)).
+
+should_return_end_session_endpoint_1(Config) ->
   ct:log("settings: ~p", [rabbit_mgmt_wm_auth:authSettings()]),
   assertEqual_on_attribute_for_oauth_resource_server(rabbit_mgmt_wm_auth:authSettings(),
-    Config, rabbit, end_session_endpoint, logout_url).
+    Config, rabbit, end_session_endpoint, ?config(logout_url_1, Config)).
 
 
 %% -------------------------------------------------------------------