ServiceAccounts: Add identifiable token prefix to service account tokens (#49011)

* Add prefixed API key gen. * Retrieve API Key by hash * Handle prefixed API keys for login * Add placeholder key generator * fix spelling * add get by hash sqlstore test * reformat query * quote usage of reserved keyword key * use constant * improve error handling and pre-select key type Co-authored-by: Victor Cinaglia <victor@grafana.com> * nits Co-authored-by: Victor Cinaglia <victor@grafana.com>
2022-05-23 13:14:38 +02:00
parent 2ba1a75d50
commit 6891bbf03c
11 changed files with 282 additions and 26 deletions
@@ -0,0 +1,40 @@
+package apikeygenprefix
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestApiKeyValidation(t *testing.T) {
+	result := KeyGenResult{
+		ClientSecret: "glsa_yscW25imSKJIuav8zF37RZmnbiDvB05G_fcaaf58a",
+		HashedKey:    "26cd2524985150529dc5f32109f544860512b999766e11bc8f3d5711bf0ba6e7020099f9f21538b5df94d577782f7431dd27",
+	}
+
+	keyInfo, err := Decode(result.ClientSecret)
+	require.NoError(t, err)
+	require.Equal(t, "sa", keyInfo.ServiceID)
+	require.Equal(t, "yscW25imSKJIuav8zF37RZmnbiDvB05G", keyInfo.Secret)
+	require.Equal(t, "fcaaf58a", keyInfo.Checksum)
+
+	hash, err := keyInfo.Hash()
+	require.NoError(t, err)
+	require.Equal(t, result.HashedKey, hash)
+}
+
+func TestApiKeyGen(t *testing.T) {
+	result, err := New("sa")
+	require.NoError(t, err)
+
+	assert.NotEmpty(t, result.ClientSecret)
+	assert.NotEmpty(t, result.HashedKey)
+
+	keyInfo, err := Decode(result.ClientSecret)
+	require.NoError(t, err)
+
+	hash, err := keyInfo.Hash()
+	require.NoError(t, err)
+	require.Equal(t, result.HashedKey, hash)
+}