-
Notifications
You must be signed in to change notification settings - Fork 420
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: Add SCIM and SAML2 security integrations to sdk (#2799)
<!-- Feel free to delete comments as you fill this in --> <!-- summary of changes --> Add security integrations to SDK. Changes in follow ups: Add remaining integration types. Use SDK in Terraform resources. Make sure related bugs are fixed. ## Test Plan <!-- detail ways in which this PR has been tested or needs to be tested --> * [ ] acceptance tests <!-- add more below if you think they are relevant --> * [ ] … ## References <!-- issues documentation links, etc --> https://docs.snowflake.com/en/sql-reference/sql/create-security-integration https://docs.snowflake.com/en/sql-reference/sql/alter-security-integration
- Loading branch information
1 parent
f20940c
commit 1312ff1
Showing
17 changed files
with
2,337 additions
and
64 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,47 @@ | ||
| package random | ||
|
|
||
| import ( | ||
| "bytes" | ||
| "crypto/rand" | ||
| "crypto/rsa" | ||
| "crypto/x509" | ||
| "crypto/x509/pkix" | ||
| "encoding/pem" | ||
| "math/big" | ||
| "strings" | ||
| "testing" | ||
| "time" | ||
|
|
||
| "github.com/stretchr/testify/require" | ||
| ) | ||
|
|
||
| // Generate X509 returns base64 encoded certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers. | ||
| func GenerateX509(t *testing.T) string { | ||
| t.Helper() | ||
| ca := &x509.Certificate{ | ||
| SerialNumber: big.NewInt(1658), | ||
| Subject: pkix.Name{ | ||
| Organization: []string{"Company, INC."}, | ||
| }, | ||
| NotAfter: time.Now().AddDate(10, 0, 0), | ||
| ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}, | ||
| KeyUsage: x509.KeyUsageDigitalSignature, | ||
| } | ||
|
|
||
| caPrivKey, err := rsa.GenerateKey(rand.Reader, 2048) | ||
| require.NoError(t, err) | ||
|
|
||
| caBytes, err := x509.CreateCertificate(rand.Reader, ca, ca, &caPrivKey.PublicKey, caPrivKey) | ||
| require.NoError(t, err) | ||
|
|
||
| certPEM := new(bytes.Buffer) | ||
| err = pem.Encode(certPEM, &pem.Block{ | ||
| Type: "CERTIFICATE", | ||
| Bytes: caBytes, | ||
| }) | ||
| require.NoError(t, err) | ||
|
|
||
| cert := strings.TrimPrefix(certPEM.String(), "-----BEGIN CERTIFICATE-----\n") | ||
| cert = strings.TrimSuffix(cert, "-----END CERTIFICATE-----\n") | ||
| return cert | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,72 @@ | ||
| package helpers | ||
|
|
||
| import ( | ||
| "context" | ||
| "testing" | ||
|
|
||
| "github.com/Snowflake-Labs/terraform-provider-snowflake/pkg/acceptance/helpers/random" | ||
| "github.com/Snowflake-Labs/terraform-provider-snowflake/pkg/sdk" | ||
| "github.com/stretchr/testify/require" | ||
| ) | ||
|
|
||
| type SecurityIntegrationClient struct { | ||
| context *TestClientContext | ||
| ids *IdsGenerator | ||
| } | ||
|
|
||
| func NewSecurityIntegrationClient(context *TestClientContext, idsGenerator *IdsGenerator) *SecurityIntegrationClient { | ||
| return &SecurityIntegrationClient{ | ||
| context: context, | ||
| ids: idsGenerator, | ||
| } | ||
| } | ||
|
|
||
| func (c *SecurityIntegrationClient) client() sdk.SecurityIntegrations { | ||
| return c.context.client.SecurityIntegrations | ||
| } | ||
|
|
||
| func (c *SecurityIntegrationClient) CreateSaml2(t *testing.T, id sdk.AccountObjectIdentifier) (*sdk.SecurityIntegration, func()) { | ||
| t.Helper() | ||
| return c.CreateSaml2WithRequest(t, sdk.NewCreateSaml2SecurityIntegrationRequest(id, false, c.ids.Alpha(), "https://example.com", "Custom", random.GenerateX509(t))) | ||
| } | ||
|
|
||
| func (c *SecurityIntegrationClient) CreateSaml2WithRequest(t *testing.T, request *sdk.CreateSaml2SecurityIntegrationRequest) (*sdk.SecurityIntegration, func()) { | ||
| t.Helper() | ||
| ctx := context.Background() | ||
|
|
||
| err := c.client().CreateSaml2(ctx, request) | ||
| require.NoError(t, err) | ||
|
|
||
| si, err := c.client().ShowByID(ctx, request.GetName()) | ||
| require.NoError(t, err) | ||
|
|
||
| return si, c.DropSecurityIntegrationFunc(t, request.GetName()) | ||
| } | ||
|
|
||
| func (c *SecurityIntegrationClient) CreateScim(t *testing.T) (*sdk.SecurityIntegration, func()) { | ||
| t.Helper() | ||
| return c.CreateScimWithRequest(t, sdk.NewCreateScimSecurityIntegrationRequest(c.ids.RandomAccountObjectIdentifier(), false, sdk.ScimSecurityIntegrationScimClientGeneric, sdk.ScimSecurityIntegrationRunAsRoleGenericScimProvisioner)) | ||
| } | ||
|
|
||
| func (c *SecurityIntegrationClient) CreateScimWithRequest(t *testing.T, request *sdk.CreateScimSecurityIntegrationRequest) (*sdk.SecurityIntegration, func()) { | ||
| t.Helper() | ||
| ctx := context.Background() | ||
|
|
||
| err := c.client().CreateScim(ctx, request) | ||
| require.NoError(t, err) | ||
|
|
||
| si, err := c.client().ShowByID(ctx, request.GetName()) | ||
| require.NoError(t, err) | ||
|
|
||
| return si, c.DropSecurityIntegrationFunc(t, request.GetName()) | ||
| } | ||
|
|
||
| func (c *SecurityIntegrationClient) DropSecurityIntegrationFunc(t *testing.T, id sdk.AccountObjectIdentifier) func() { | ||
| t.Helper() | ||
| ctx := context.Background() | ||
|
|
||
| return func() { | ||
| err := c.client().Drop(ctx, sdk.NewDropSecurityIntegrationRequest(id).WithIfExists(sdk.Bool(true))) | ||
| require.NoError(t, err) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.