github.com/clerkinc/clerk-sdk-go@v1.49.1/clerk/saml_connections_test.go

package clerk

import (
	"encoding/json"
	"fmt"
	"net/http"
	"net/url"
	"reflect"
	"testing"

	"github.com/stretchr/testify/assert"
)

func TestSAMLConnectionsService_ListAll(t *testing.T) {
	c, mux, _, teardown := setup("token")
	defer teardown()

	dummyResponse := fmt.Sprintf(`{
		"data": [%s],
		"total_count": 1
	}`, dummySAMLConnectionJSON)

	mux.HandleFunc("/saml_connections", func(w http.ResponseWriter, req *http.Request) {
		testHttpMethod(t, req, http.MethodGet)
		testHeader(t, req, "Authorization", "Bearer token")

		expectedQuery := url.Values{
			"limit":    {"5"},
			"offset":   {"6"},
			"query":    {"my-query"},
			"order_by": {"created_at"},
		}
		assert.Equal(t, expectedQuery, req.URL.Query())

		_, _ = fmt.Fprint(w, dummyResponse)
	})

	listParams := ListSAMLConnectionsParams{
		Limit:   intToPtr(5),
		Offset:  intToPtr(6),
		Query:   stringToPtr("my-query"),
		OrderBy: stringToPtr("created_at"),
	}

	got, err := c.SAMLConnections().ListAll(listParams)
	assert.NoError(t, err)

	expected := &ListSAMLConnectionsResponse{}
	_ = json.Unmarshal([]byte(dummyResponse), expected)

	if !reflect.DeepEqual(got, expected) {
		t.Errorf("Response = %v, want %v", got, expected)
	}
}

func TestSAMLConnectionsService_Read(t *testing.T) {
	dummyResponse := dummySAMLConnectionJSON

	c, mux, _, teardown := setup("token")
	defer teardown()

	url := fmt.Sprintf("/saml_connections/%s", dummySAMLConnectionID)

	mux.HandleFunc(url, func(w http.ResponseWriter, req *http.Request) {
		testHttpMethod(t, req, http.MethodGet)
		testHeader(t, req, "Authorization", "Bearer token")
		_, _ = fmt.Fprint(w, dummyResponse)
	})

	got, err := c.SAMLConnections().Read(dummySAMLConnectionID)
	assert.NoError(t, err)

	expected := SAMLConnection{}
	_ = json.Unmarshal([]byte(dummyResponse), &expected)

	if !reflect.DeepEqual(*got, expected) {
		t.Errorf("Response = %v, want %v", got, expected)
	}
}

func TestSAMLConnectionsService_Create(t *testing.T) {
	dummyResponse := dummySAMLConnectionJSON

	c, mux, _, teardown := setup("token")
	defer teardown()

	mux.HandleFunc("/saml_connections", func(w http.ResponseWriter, req *http.Request) {
		testHttpMethod(t, req, http.MethodPost)
		testHeader(t, req, "Authorization", "Bearer token")
		_, _ = fmt.Fprint(w, dummyResponse)
	})

	createParams := &CreateSAMLConnectionParams{
		Name:           "Testing SAML",
		Domain:         "example.com",
		Provider:       "saml_custom",
		IdpEntityID:    stringToPtr("test-idp-entity-id"),
		IdpSsoURL:      stringToPtr("https://example.com/saml/sso"),
		IdpCertificate: stringToPtr(dummySAMLConnectionCertificate),
	}

	got, err := c.SAMLConnections().Create(createParams)
	assert.NoError(t, err)

	expected := SAMLConnection{}
	_ = json.Unmarshal([]byte(dummyResponse), &expected)

	if !reflect.DeepEqual(*got, expected) {
		t.Errorf("Response = %v, want %v", got, expected)
	}
}

func TestSAMLConnectionsService_Update(t *testing.T) {
	expectedName := "New name for Testing SAML"
	expectedActive := true
	expectedSyncUserAttributes := false
	expectedAllowSubdomains := true
	expectedAllowIdpInitiated := true
	dummyResponse := dummySAMLConnectionUpdatedJSON

	c, mux, _, teardown := setup("token")
	defer teardown()

	url := fmt.Sprintf("/saml_connections/%s", dummySAMLConnectionID)

	mux.HandleFunc(url, func(w http.ResponseWriter, req *http.Request) {
		testHttpMethod(t, req, http.MethodPatch)
		testHeader(t, req, "Authorization", "Bearer token")
		_, _ = fmt.Fprint(w, dummyResponse)
	})

	updateParams := &UpdateSAMLConnectionParams{
		Name:               &expectedName,
		Active:             &expectedActive,
		SyncUserAttributes: &expectedSyncUserAttributes,
		IdpMetadataURL:     stringToPtr("https://example.com/saml/metadata"),
		IdpMetadata:        stringToPtr(dummyIdpMetadata),
		AttributeMapping: &SAMLConnectionAttributeMapping{
			UserID:       "custom_user_id",
			EmailAddress: "custom_email",
			FirstName:    "custom_first",
			LastName:     "custom_last",
		},
		AllowSubdomains:   &expectedAllowSubdomains,
		AllowIdpInitiated: &expectedAllowIdpInitiated,
	}

	got, err := c.SAMLConnections().Update(dummySAMLConnectionID, updateParams)
	assert.NoError(t, err)

	expected := SAMLConnection{}
	_ = json.Unmarshal([]byte(dummyResponse), &expected)

	if !reflect.DeepEqual(*got, expected) {
		t.Errorf("Response = %v, want %v", got, expected)
	}
}

func TestSAMLConnectionsService_Delete(t *testing.T) {
	c, mux, _, teardown := setup("token")
	defer teardown()

	url := fmt.Sprintf("/saml_connections/%s", dummySAMLConnectionID)

	mux.HandleFunc(url, func(w http.ResponseWriter, req *http.Request) {
		testHttpMethod(t, req, http.MethodDelete)
		testHeader(t, req, "Authorization", "Bearer token")
		response := fmt.Sprintf(`{ "deleted": true, "id": "%s", "object": "saml_connection" }`, dummySAMLConnectionID)
		_, _ = fmt.Fprint(w, response)
	})

	expected := DeleteResponse{
		ID:      dummySAMLConnectionID,
		Object:  "saml_connection",
		Deleted: true,
	}

	got, err := c.SAMLConnections().Delete(dummySAMLConnectionID)
	assert.NoError(t, err)

	if !reflect.DeepEqual(*got, expected) {
		t.Errorf("Response = %v, want %v", *got, expected)
	}
}

const (
	dummySAMLConnectionID = "samlc_2P17P4pXsx8MmunM1pkeYeimDDd"

	dummySAMLConnectionJSON = `
{
    "object": "saml_connection",
	"id": "` + dummySAMLConnectionID + `",
    "name": "Testing SAML",
    "domain": "example.com",
	"idp_entity_id": "test-idp-entity-id",
	"idp_sso_url": "https://example.com/saml/sso",
	"idp_certificate": "` + dummySAMLConnectionCertificate + `",
	"idp_metadata_url": "https://example.com/saml/metadata",
	"acs_url": "` + "https://clerk.example.com/v1/saml/acs/" + dummySAMLConnectionID + `",
	"sp_entity_id": "` + "https://clerk.example.com/saml/" + dummySAMLConnectionID + `",
	"sp_metadata_url": "` + "https://clerk.example.com/v1/saml/metadata/" + dummySAMLConnectionID + `",
	"attribute_mapping": {
		"user_id": "id",
		"email_address": "mail",
		"first_name": "firstName",
		"last_name": "lastName"
	},
	"active": false,
	"provider": "saml_custom",
	"user_count": 3,
	"sync_user_attributes": true,
	"allow_subdomains": false,
	"allow_idp_initiated": false
}`

	dummySAMLConnectionUpdatedJSON = `
{
    "object": "saml_connection",
	"id": "` + dummySAMLConnectionID + `",
    "name": "New name for Testing SAML",
    "domain": "example.com",
	"idp_entity_id": "test-idp-entity-id",
	"idp_sso_url": "https://example.com/saml/sso",
	"idp_certificate": "` + dummySAMLConnectionCertificate + `",
	"idp_metadata_url": "https://example.com/saml/metadata",
	"idp_metadata": "` + dummyIdpMetadata + `",
	"acs_url": "` + "https://clerk.example.com/v1/saml/acs/" + dummySAMLConnectionID + `",
	"sp_entity_id": "` + "https://clerk.example.com/saml/" + dummySAMLConnectionID + `",
	"sp_metadata_url": "` + "https://clerk.example.com/v1/saml/metadata/" + dummySAMLConnectionID + `",
	"attribute_mapping": {
		"user_id": "custom_id",
		"email_address": "custom_email",
		"first_name": "custom_first",
		"last_name": "custom_last"
	},
	"active": true,
	"provider": "saml_custom",
	"user_count": 3,
	"sync_user_attributes": false,
	"allow_subdomains": true,
	"allow_idp_initiated": true
}`

	dummySAMLConnectionCertificate = `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`

	dummyIdpMetadata = `<?xml version=\"1.0\" encoding=\"UTF-8\"?><md:EntityDescriptor entityID=\"test-idp-entity-id\" xmlns:md=\"urn:oasis:names:tc:SAML:2.0:metadata\"><md:IDPSSODescriptor WantAuthnRequestsSigned=\"false\" protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\"><md:KeyDescriptor use=\"signing\"><ds:KeyInfo xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat><md:SingleSignOnService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" Location=\"https://example.com/saml/sso\"/></md:IDPSSODescriptor></md:EntityDescriptor>`
)