github.com/kyma-project/kyma-environment-broker@v0.0.1/internal/ias/fake_client.go

package ias

import "fmt"

const (
	FakeIdentityProviderName = "IdentityProviderName"
	FakeIdentityProviderID   = "0dbae593-ab1d-4774-97c1-5118ea22ea2d"
	FakeGrafanaName          = "GrafanaName"
	FakeGrafanaID            = "eebb54dd-e4d5-43a1-929a-e98ea2831342"
	FakeUserForRest          = "874a7fd7-7f0c-482d-ba44-3563b2622586"
	FakeDexName              = "DexName"
	FakeDexID                = "dd70d82e-0a30-4931-9171-3a55a0725512"
	FakeClientID             = "cid"
	FakeClientSecret         = "csc"
)

type FakeClient struct {
	serviceProviders []*ServiceProvider
}

func NewFakeClient() *FakeClient {
	return &FakeClient{
		serviceProviders: []*ServiceProvider{
			{
				ID:          FakeGrafanaID,
				DisplayName: fmt.Sprintf("SKR Grafana (instanceID: %s)", FakeGrafanaName),
				AssertionAttributes: []AssertionAttribute{
					{
						AssertionAttribute: "test",
						UserAttribute:      "test",
					},
				},
				UserForRest: FakeUserForRest,
			},
			{
				ID:          FakeDexID,
				DisplayName: fmt.Sprintf("SKR Dex (instanceID: %s)", FakeDexName),
				AssertionAttributes: []AssertionAttribute{
					{
						AssertionAttribute: "test",
						UserAttribute:      "test",
					},
				},
				UserForRest: "2f27c57d-1f05-4c0b-b84a-8fdeeb0de6c0",
			},
		},
	}
}

func (f *FakeClient) GetCompany() (*Company, error) {
	var sp []ServiceProvider
	for _, fsp := range f.serviceProviders {
		sp = append(sp, *fsp)
	}

	return &Company{
		ServiceProviders: sp,
		IdentityProviders: []IdentityProvider{
			{
				Name: FakeIdentityProviderName,
				ID:   FakeIdentityProviderID,
			},
		},
	}, nil
}

func (f *FakeClient) CreateServiceProvider(name string, _ string) error {
	f.serviceProviders = append(f.serviceProviders, &ServiceProvider{
		DisplayName: name,
	})

	return nil
}

func (f *FakeClient) SetDefaultAuthenticatingIDP(config DefaultAuthIDPConfig) error {
	serviceProvider, err := f.GetServiceProvider(config.ID)
	if err != nil {
		return err
	}

	serviceProvider.AuthenticatingIdp.ID = FakeIdentityProviderID
	serviceProvider.AuthenticatingIdp.Name = FakeIdentityProviderName

	return nil
}

func (f FakeClient) GenerateServiceProviderSecret(ss SecretConfiguration) (*ServiceProviderSecret, error) {
	serviceProvider, err := f.GetServiceProvider(ss.ID)
	if err != nil {
		return &ServiceProviderSecret{}, err
	}

	serviceProvider.Secret = append(serviceProvider.Secret, SPSecret{
		SecretID:    FakeClientID,
		Description: ss.RestAPIClientSecret.Description,
		Scopes:      ss.RestAPIClientSecret.Scopes,
	})

	return &ServiceProviderSecret{
		ClientID:     FakeClientID,
		ClientSecret: FakeClientSecret,
	}, nil
}

func (f FakeClient) AuthenticationURL(id ProviderID) string {
	return fmt.Sprintf("https://authentication.com/%s", id)
}

func (f *FakeClient) SetOIDCConfiguration(id string, iasType OIDCType) error {
	serviceProvider, err := f.GetServiceProvider(id)
	if err != nil {
		return err
	}

	serviceProvider.SsoType = iasType.SsoType
	serviceProvider.RedirectURIs = iasType.OpenIDConnectConfig.RedirectURIs

	return nil
}

func (f *FakeClient) SetSAMLConfiguration(id string, iasType SAMLType) error {
	serviceProvider, err := f.GetServiceProvider(id)
	if err != nil {
		return err
	}

	serviceProvider.SsoType = "saml2"
	serviceProvider.ACSEndpoints = iasType.ACSEndpoints

	return nil
}

func (f FakeClient) SetAssertionAttribute(id string, paa PostAssertionAttributes) error {
	serviceProvider, err := f.GetServiceProvider(id)
	if err != nil {
		return err
	}

	serviceProvider.AssertionAttributes = paa.AssertionAttributes

	return nil
}

func (f FakeClient) SetSubjectNameIdentifier(id string, sni SubjectNameIdentifier) error {
	serviceProvider, err := f.GetServiceProvider(id)
	if err != nil {
		return err
	}

	serviceProvider.NameIDAttribute = sni.NameIDAttribute

	return nil
}

func (f FakeClient) SetAuthenticationAndAccess(id string, auth AuthenticationAndAccess) error {
	serviceProvider, err := f.GetServiceProvider(id)
	if err != nil {
		return err
	}

	serviceProvider.RBAConfig = auth.ServiceProviderAccess.RBAConfig

	return nil
}

func (f *FakeClient) DeleteServiceProvider(id string) error {
	for index, sp := range f.serviceProviders {
		if sp.ID == id {
			f.serviceProviders[index] = f.serviceProviders[len(f.serviceProviders)-1]
			f.serviceProviders[len(f.serviceProviders)-1] = nil
			f.serviceProviders = f.serviceProviders[:len(f.serviceProviders)-1]
			return nil
		}
	}

	return nil
}

func (f *FakeClient) DeleteSecret(payload SecretsRef) error {
	for _, provider := range f.serviceProviders {
		if provider.UserForRest != payload.ClientID {
			continue
		}
		for _, scID := range payload.ClientSecretsIDs {
			f.removeSecrets(provider, scID)
		}
	}

	return nil
}

func (f *FakeClient) removeSecrets(provider *ServiceProvider, secretID string) {
	var newSecrets []SPSecret
	for _, secret := range provider.Secret {
		if secret.SecretID != secretID {
			newSecrets = append(newSecrets, secret)
		}
	}

	provider.Secret = newSecrets
}

func (f *FakeClient) GetServiceProvider(id string) (*ServiceProvider, error) {
	for _, sp := range f.serviceProviders {
		if sp.ID == id {
			return sp, nil
		}
	}

	return nil, fmt.Errorf("cannot find ServiceProvider with ID: %s", id)
}