secrets_test.go

package opslevel_test

import (
	"testing"

	"github.com/opslevel/opslevel-go/v2025"
	"github.com/rocktavious/autopilot/v2023"
)

func TestCreateSecret(t *testing.T) {
	// Arrange
	testRequest := autopilot.NewTestRequest(
		`mutation SecretsVaultsSecretCreate($alias:String!$input:SecretInput!){secretsVaultsSecretCreate(alias: $alias, input: $input){secret{alias,id,owner{alias,id},timestamps{createdAt,updatedAt}},errors{message,path}}}`,
		`{{ template "secret_create_vars" }}`,
		`{{ template "secret_create_response" }}`,
	)
	client := BestTestClient(t, "secrets/create", testRequest)
	// Act
	secretInput := opslevel.SecretInput{
		Owner: opslevel.NewIdentifier(string(id2)),
		Value: opslevel.RefOf("my-secret"),
	}
	result, err := client.CreateSecret("alias1", secretInput)

	// Assert
	autopilot.Ok(t, err)
	autopilot.Equals(t, id2, result.Owner.Id)
}

func TestGetSecret(t *testing.T) {
	// Arrange
	testRequest := autopilot.NewTestRequest(
		`query SecretsVaultsSecret($input:IdentifierInput!){account{secretsVaultsSecret(input: $input){alias,id,owner{alias,id},timestamps{createdAt,updatedAt}}}}`,
		`{{ template "secret_get_vars" }}`,
		`{{ template "secret_get_response" }}`,
	)
	client := BestTestClient(t, "secret/get", testRequest)
	// Act
	result, err := client.GetSecret(string(id2))
	// Assert
	autopilot.Equals(t, nil, err)
	autopilot.Equals(t, id2, result.Id)
}

func TestListSecrets(t *testing.T) {
	// Arrange
	testRequestOne := autopilot.NewTestRequest(
		`query SecretList($after:String!$first:Int!){account{secretsVaultsSecrets(after: $after, first: $first){nodes{alias,id,owner{alias,id},timestamps{createdAt,updatedAt}},{{ template "pagination_request" }}}}}`,
		`{{ template "pagination_initial_query_variables" }}`,
		`{{ template "secret_list_response_1" }}`,
	)
	testRequestTwo := autopilot.NewTestRequest(
		`query SecretList($after:String!$first:Int!){account{secretsVaultsSecrets(after: $after, first: $first){nodes{alias,id,owner{alias,id},timestamps{createdAt,updatedAt}},{{ template "pagination_request" }}}}}`,
		`{{ template "pagination_second_query_variables" }}`,
		`{{ template "secret_list_response_2" }}`,
	)
	requests := []autopilot.TestRequest{testRequestOne, testRequestTwo}

	client := BestTestClient(t, "secrets/list", requests...)
	// Act
	secretsVaultsSecretConnection, err := client.ListSecretsVaultsSecret(nil)
	secretNode := secretsVaultsSecretConnection.Nodes
	// Assert
	autopilot.Ok(t, err)
	autopilot.Equals(t, 3, secretsVaultsSecretConnection.TotalCount)
	autopilot.Equals(t, "example_2", secretNode[1].Alias)
	autopilot.Equals(t, secretNode[1].Alias, secretNode[1].Owner.Alias)
}

func TestUpdateSecret(t *testing.T) {
	// Arrange
	testRequest := autopilot.NewTestRequest(
		`mutation SecretsVaultsSecretUpdate($input:SecretInput!$secret:IdentifierInput!){secretsVaultsSecretUpdate(input: $input, secret: $secret){secret{alias,id,owner{alias,id},timestamps{createdAt,updatedAt}},errors{message,path}}}`,
		`{{ template "secret_update_vars" }}`,
		`{{ template "secret_update_response" }}`,
	)
	client := BestTestClient(t, "secrets/update", testRequest)
	// Act
	secretInput := opslevel.SecretInput{
		Owner: opslevel.NewIdentifier(string(id2)),
		Value: opslevel.RefOf("secret_value_2"),
	}
	result, err := client.UpdateSecret(string(id2), secretInput)
	// Assert
	autopilot.Ok(t, err)
	autopilot.Equals(t, id2, result.Id)
	autopilot.Equals(t, id2, result.Owner.Id)
}

func TestDeleteSecrets(t *testing.T) {
	// Arrange
	testRequest := autopilot.NewTestRequest(
		`mutation SecretsVaultsSecretDelete($input:IdentifierInput!){secretsVaultsSecretDelete(resource: $input){errors{message,path}}}`,
		`{{ template "secret_delete_vars" }}`,
		`{{ template "secret_delete_response" }}`,
	)

	client := BestTestClient(t, "secrets/delete", testRequest)
	// Act
	err := client.DeleteSecret(string(id1))
	// Assert
	autopilot.Equals(t, nil, err)
}