mirror of
				https://github.com/optim-enterprises-bv/vault.git
				synced 2025-10-31 10:37:56 +00:00 
			
		
		
		
	 2b0f80b981
			
		
	
	2b0f80b981
	
	
	
		
			
			* Add backend plugin changes * Fix totp backend plugin tests * Fix logical/plugin InvalidateKey test * Fix plugin catalog CRUD test, fix NoopBackend * Clean up commented code block * Fix system backend mount test * Set plugin_name to omitempty, fix handleMountTable config parsing * Clean up comments, keep shim connections alive until cleanup * Include pluginClient, disallow LookupPlugin call from within a plugin * Add wrapper around backendPluginClient for proper cleanup * Add logger shim tests * Add logger, storage, and system shim tests * Use pointer receivers for system view shim * Use plugin name if no path is provided on mount * Enable plugins for auth backends * Add backend type attribute, move builtin/plugin/package * Fix merge conflict * Fix missing plugin name in mount config * Add integration tests on enabling auth backend plugins * Remove dependency cycle on mock-plugin * Add passthrough backend plugin, use logical.BackendType to determine lease generation * Remove vault package dependency on passthrough package * Add basic impl test for passthrough plugin * Incorporate feedback; set b.backend after shims creation on backendPluginServer * Fix totp plugin test * Add plugin backends docs * Fix tests * Fix builtin/plugin tests * Remove flatten from PluginRunner fields * Move mock plugin to logical/plugin, remove totp and passthrough plugins * Move pluginMap into newPluginClient * Do not create storage RPC connection on HandleRequest and HandleExistenceCheck * Change shim logger's Fatal to no-op * Change BackendType to uint32, match UX backend types * Change framework.Backend Setup signature * Add Setup func to logical.Backend interface * Move OptionallyEnableMlock call into plugin.Serve, update docs and comments * Remove commented var in plugin package * RegisterLicense on logical.Backend interface (#3017) * Add RegisterLicense to logical.Backend interface * Update RegisterLicense to use callback func on framework.Backend * Refactor framework.Backend.RegisterLicense * plugin: Prevent plugin.SystemViewClient.ResponseWrapData from getting JWTs * plugin: Revert BackendType to remove TypePassthrough and related references * Fix typo in plugin backends docs
		
			
				
	
	
		
			177 lines
		
	
	
		
			3.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			177 lines
		
	
	
		
			3.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| package plugin
 | |
| 
 | |
| import (
 | |
| 	"testing"
 | |
| 	"time"
 | |
| 
 | |
| 	gplugin "github.com/hashicorp/go-plugin"
 | |
| 	"github.com/hashicorp/vault/helper/logformat"
 | |
| 	"github.com/hashicorp/vault/logical"
 | |
| 	"github.com/hashicorp/vault/logical/plugin/mock"
 | |
| 	log "github.com/mgutz/logxi/v1"
 | |
| )
 | |
| 
 | |
| func TestBackendPlugin_impl(t *testing.T) {
 | |
| 	var _ gplugin.Plugin = new(BackendPlugin)
 | |
| 	var _ logical.Backend = new(backendPluginClient)
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_HandleRequest(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	resp, err := b.HandleRequest(&logical.Request{
 | |
| 		Operation: logical.ReadOperation,
 | |
| 		Path:      "test/ing",
 | |
| 		Data:      map[string]interface{}{"value": "foo"},
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| 	if resp.Data["value"] != "foo" {
 | |
| 		t.Fatalf("bad: %#v", resp)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_SpecialPaths(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	paths := b.SpecialPaths()
 | |
| 	if paths == nil {
 | |
| 		t.Fatal("SpecialPaths() returned nil")
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_System(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	sys := b.System()
 | |
| 	if sys == nil {
 | |
| 		t.Fatal("System() returned nil")
 | |
| 	}
 | |
| 
 | |
| 	actual := sys.DefaultLeaseTTL()
 | |
| 	expected := 300 * time.Second
 | |
| 
 | |
| 	if actual != expected {
 | |
| 		t.Fatalf("bad: %v, expected %v", actual, expected)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_Logger(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	logger := b.Logger()
 | |
| 	if logger == nil {
 | |
| 		t.Fatal("Logger() returned nil")
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_HandleExistenceCheck(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	checkFound, exists, err := b.HandleExistenceCheck(&logical.Request{
 | |
| 		Operation: logical.CreateOperation,
 | |
| 		Path:      "test/ing",
 | |
| 		Data:      map[string]interface{}{"value": "foo"},
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| 	if !checkFound {
 | |
| 		t.Fatal("existence check not found for path 'test/ing'")
 | |
| 	}
 | |
| 	if exists {
 | |
| 		t.Fatal("existence check should have returned 'false' for 'testing/read'")
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_Cleanup(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	b.Cleanup()
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_Initialize(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	err := b.Initialize()
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_InvalidateKey(t *testing.T) {
 | |
| 	b, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| 
 | |
| 	resp, err := b.HandleRequest(&logical.Request{
 | |
| 		Operation: logical.ReadOperation,
 | |
| 		Path:      "internal",
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| 	if resp.Data["value"] == "" {
 | |
| 		t.Fatalf("bad: %#v, expected non-empty value", resp)
 | |
| 	}
 | |
| 
 | |
| 	b.InvalidateKey("internal")
 | |
| 
 | |
| 	resp, err = b.HandleRequest(&logical.Request{
 | |
| 		Operation: logical.ReadOperation,
 | |
| 		Path:      "internal",
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| 	if resp.Data["value"] != "" {
 | |
| 		t.Fatalf("bad: expected empty response data, got %#v", resp)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func TestBackendPlugin_Setup(t *testing.T) {
 | |
| 	_, cleanup := testBackend(t)
 | |
| 	defer cleanup()
 | |
| }
 | |
| 
 | |
| func testBackend(t *testing.T) (logical.Backend, func()) {
 | |
| 	// Create a mock provider
 | |
| 	pluginMap := map[string]gplugin.Plugin{
 | |
| 		"backend": &BackendPlugin{
 | |
| 			Factory: mock.Factory,
 | |
| 		},
 | |
| 	}
 | |
| 	client, _ := gplugin.TestPluginRPCConn(t, pluginMap)
 | |
| 	cleanup := func() {
 | |
| 		client.Close()
 | |
| 	}
 | |
| 
 | |
| 	// Request the backend
 | |
| 	raw, err := client.Dispense(BackendPluginName)
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| 	b := raw.(logical.Backend)
 | |
| 
 | |
| 	err = b.Setup(&logical.BackendConfig{
 | |
| 		Logger: logformat.NewVaultLogger(log.LevelTrace),
 | |
| 		System: &logical.StaticSystemView{
 | |
| 			DefaultLeaseTTLVal: 300 * time.Second,
 | |
| 			MaxLeaseTTLVal:     1800 * time.Second,
 | |
| 		},
 | |
| 		StorageView: &logical.InmemStorage{},
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		t.Fatal(err)
 | |
| 	}
 | |
| 
 | |
| 	return b, cleanup
 | |
| }
 |