bugfix ldap

2026-04-21 13:03:08 +10:00
parent 4b1b985862
commit d2a7145a4c
2 changed files with 62 additions and 3 deletions
@@ -86,3 +86,41 @@ func TestBuildGroupMembershipFilter(t *testing.T) {
 		t.Fatalf("unexpected group filter:\n got: %s\nwant: %s", filter, expected)
 	}
 }
+
+func TestParseWhoAmIDN(t *testing.T) {
+	tests := []struct {
+		name    string
+		authzID string
+		wantDN  string
+	}{
+		{
+			name:    "dn prefix",
+			authzID: "dn:CN=User,OU=Users,DC=corpau,DC=wbcau,DC=westpac,DC=com,DC=au",
+			wantDN:  "CN=User,OU=Users,DC=corpau,DC=wbcau,DC=westpac,DC=com,DC=au",
+		},
+		{
+			name:    "dn prefix upper",
+			authzID: "DN:CN=User,OU=Users,DC=corpau,DC=wbcau,DC=westpac,DC=com,DC=au",
+			wantDN:  "CN=User,OU=Users,DC=corpau,DC=wbcau,DC=westpac,DC=com,DC=au",
+		},
+		{
+			name:    "non dn authzid",
+			authzID: "u:L075239@corpau.wbcau.westpac.com.au",
+			wantDN:  "",
+		},
+		{
+			name:    "plain non dn",
+			authzID: "L075239@corpau.wbcau.westpac.com.au",
+			wantDN:  "",
+		},
+	}
+
+	for _, tc := range tests {
+		t.Run(tc.name, func(t *testing.T) {
+			got := parseWhoAmIDN(tc.authzID)
+			if got != tc.wantDN {
+				t.Fatalf("unexpected whoami dn parse: got=%q want=%q", got, tc.wantDN)
+			}
+		})
+	}
+}