Codex
bb7968b612
Publish Docker image (Multi-arch) / Build & push (amd64) (push) Failing after 9m20s
Release (Linux, macOS, Windows) / Linux Release (push) Failing after 55m7s
Publish Docker image (Multi-arch) / Build & push (arm64) (push) Canceled after 0s
Release (Linux, macOS, Windows) / macOS Release (push) Canceled after 0s
Release (Linux, macOS, Windows) / Windows Release (push) Canceled after 0s
Publish Docker image (Multi-arch) / Create multi-arch manifests (push) Canceled after 0s
61 lines
2.6 KiB
Go
61 lines
2.6 KiB
Go
package common
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestInitUserSessionSettingsUsesPositiveFallbacksAndClampsWindow(t *testing.T) {
|
|
previousActiveLimit := UserSessionActiveLimit
|
|
previousIssuanceLimit := UserSessionIssuanceLimit
|
|
previousIssuanceWindow := UserSessionIssuanceWindowSeconds
|
|
previousRevokedRetention := UserSessionRevokedRetentionDays
|
|
previousAlertThreshold := UserSessionHourlyAlertThreshold
|
|
t.Cleanup(func() {
|
|
UserSessionActiveLimit = previousActiveLimit
|
|
UserSessionIssuanceLimit = previousIssuanceLimit
|
|
UserSessionIssuanceWindowSeconds = previousIssuanceWindow
|
|
UserSessionRevokedRetentionDays = previousRevokedRetention
|
|
UserSessionHourlyAlertThreshold = previousAlertThreshold
|
|
})
|
|
|
|
t.Setenv("USER_SESSION_ACTIVE_LIMIT", "0")
|
|
t.Setenv("USER_SESSION_ISSUANCE_LIMIT", "-2")
|
|
t.Setenv("USER_SESSION_ISSUANCE_WINDOW_SECONDS", "invalid")
|
|
t.Setenv("USER_SESSION_REVOKED_RETENTION_DAYS", "0")
|
|
t.Setenv("USER_SESSION_HOURLY_ALERT_THRESHOLD", "-1")
|
|
initUserSessionSettings()
|
|
|
|
assert.Equal(t, DefaultUserSessionActiveLimit, UserSessionActiveLimit)
|
|
assert.Equal(t, DefaultUserSessionIssuanceLimit, UserSessionIssuanceLimit)
|
|
assert.Equal(t, int64(DefaultUserSessionIssuanceWindowSeconds), UserSessionIssuanceWindowSeconds)
|
|
assert.Equal(t, DefaultUserSessionRevokedRetentionDays, UserSessionRevokedRetentionDays)
|
|
assert.Equal(t, DefaultUserSessionHourlyAlertThreshold, UserSessionHourlyAlertThreshold)
|
|
|
|
t.Setenv("USER_SESSION_ACTIVE_LIMIT", "12")
|
|
t.Setenv("USER_SESSION_ISSUANCE_LIMIT", "34")
|
|
t.Setenv("USER_SESSION_ISSUANCE_WINDOW_SECONDS", "172800")
|
|
t.Setenv("USER_SESSION_REVOKED_RETENTION_DAYS", "1")
|
|
t.Setenv("USER_SESSION_HOURLY_ALERT_THRESHOLD", "56")
|
|
initUserSessionSettings()
|
|
|
|
assert.Equal(t, 12, UserSessionActiveLimit)
|
|
assert.Equal(t, 34, UserSessionIssuanceLimit)
|
|
assert.Equal(t, int64(24*60*60), UserSessionIssuanceWindowSeconds)
|
|
assert.Equal(t, 1, UserSessionRevokedRetentionDays)
|
|
assert.Equal(t, 56, UserSessionHourlyAlertThreshold)
|
|
|
|
t.Setenv("USER_SESSION_ISSUANCE_WINDOW_SECONDS", "43200")
|
|
initUserSessionSettings()
|
|
assert.Equal(t, int64(12*60*60), UserSessionIssuanceWindowSeconds, "a window below retention remains unchanged")
|
|
|
|
t.Setenv("USER_SESSION_ISSUANCE_WINDOW_SECONDS", "86400")
|
|
initUserSessionSettings()
|
|
assert.Equal(t, int64(24*60*60), UserSessionIssuanceWindowSeconds, "a window equal to retention remains unchanged")
|
|
|
|
t.Setenv("USER_SESSION_REVOKED_RETENTION_DAYS", "9223372036854775807")
|
|
initUserSessionSettings()
|
|
assert.Equal(t, DefaultUserSessionRevokedRetentionDays, UserSessionRevokedRetentionDays)
|
|
}
|