sso.bats

#!/usr/bin/env bats

load test_helper

@test "sso.service.ls" {
  if [ ! "${SSO_BATS}" = "1" ]; then
    skip "skip sso.service.ls by default"
  fi

  vcsim_env

  sts=$(govc option.ls config.vpxd.sso.sts.uri | awk '{print $2}')

  # Remove credentials from URL, lookup service allows anonymous access
  GOVC_URL="$(govc env GOVC_URL)"

  run govc sso.service.ls
  assert_success

  run govc sso.service.ls -l
  assert_success

  run govc sso.service.ls -json
  assert_success

  run govc sso.service.ls -dump
  assert_success

  [ -z "$(govc sso.service.ls -t enoent)" ]

  run govc sso.service.ls -t cs.identity -U
  assert_success "$sts"

  run govc sso.service.ls -t sso:sts -U
  assert_success "$sts"

  if [ "${SSO_BATS_ASSERT_CERT}" = "1" ]; then
    cert=$(govc about.cert -show | grep -v CERTIFICATE | tr -d '\n')
    trust=$(govc sso.service.ls -json -t sso:sts | jq -r .[].ServiceEndpoints[].SslTrust[0])
    assert_equal "$cert" "$trust"
  fi

  govc sso.service.ls -t cs.identity | grep com.vmware.cis | grep -v https:
  govc sso.service.ls -t cs.identity -l | grep https:
  govc sso.service.ls -p com.vmware.cis -t cs.identity -P wsTrust -T com.vmware.cis.cs.identity.sso -l | grep wsTrust
  govc sso.service.ls -P vmomi | grep vcenterserver | grep -v https:
  govc sso.service.ls -P vmomi -l | grep https:
}

@test "sso.idp.ls" {
  vcsim_env

  run govc sso.idp.ls -json
  assert_success

  run govc sso.idp.ls
  assert_success
  [ ${#lines[@]} -eq 4 ]
  assert_matches "System Domain"
  assert_matches "Local OS"
  assert_matches "ActiveDirectory"
}