Add provider side of Auth contract tests.

.make/test.mk

@@ -174,6 +174,35 @@ test-integration-benchmark: prebuild-check migrate-database $(SOURCES)
 	$(eval TEST_PACKAGES:=$(shell go list ./... | grep -v $(ALL_PKGS_EXCLUDE_PATTERN)))
 	AUTH_DEVELOPER_MODE_ENABLED=1 AUTH_LOG_LEVEL=error AUTH_RESOURCE_DATABASE=1 AUTH_RESOURCE_UNIT_TEST=0 F8_LOG_LEVEL=$(F8_LOG_LEVEL) go test $(GO_TEST_INTEGRATION_FLAG) -vet off -run=^$$ -bench=. -cpu 1,2,4 -test.benchmem $(GO_TEST_VERBOSITY_FLAG) $(TEST_PACKAGES)
 
+.PHONY: test-contracts-provider-no-coverage
+## Runs the contract tests WITHOUT producing coverage files for each package.
+## Make sure you ran "make dev" before you run this target.
+## The Chrome or Chromium browser with headless feature
+## as well as the [chromedriver](http://chromedriver.chromium.org/) is required
+## to be installed for the user login part of the tests.
+## The following env variables needs to be set in environment:
+## - Pact consumer for whom the contract is verified as provider
+##   PACT_CONSUMER
+## - Pact broker for storing pact files
+##   PACT_BROKER_URL
+##   PACT_BROKER_USERNAME
+##   PACT_BROKER_PASSWORD
+## - RHD account credentials:
+##   OSIO_USERNAME
+##   OSIO_PASSWORD
+##   OSIO_CLUSTER_URL
+## - Service account credentials (according to https://github.com/fabric8-services/fabric8-auth/blob/master/configuration/conf-files/service-account-secrets.conf#L30)
+##   ONLINE_REGISTRATION_SERVICE_ACCOUNT_CLIENT_ID
+##   ONLINE_REGISTRATION_SERVICE_ACCOUNT_CLIENT_SERCRET
+test-contracts-provider-no-coverage: prebuild-check migrate-database $(SOURCES)
+	$(call log-info,"Running test: $@")
+	$(eval TEST_PACKAGES:=$(shell go list ./... | grep 'contracts/provider'))
+	$(eval PACT_VERSION?=latest)
+	PACT_DIR=$(TMP_PATH)/test/contracts/pacts \
+	PACT_VERSION=$(PACT_VERSION) \
+	PACT_PROVIDER_BASE_URL=http://localhost:8089 \
+	go test -count=1 $(GO_TEST_VERBOSITY_FLAG) $(TEST_PACKAGES)
+
 .PHONY: test-remote-with-coverage
 ## Runs the remote tests and produces coverage files for each package.
 test-remote-with-coverage: prebuild-check clean-coverage-remote $(COV_PATH_REMOTE)

Gopkg.toml

@@ -46,7 +46,10 @@ required = [
   "github.com/jstemmer/go-junit-report",
   "github.com/wadey/gocovmerge",
   "github.com/pilu/fresh",
-  "github.com/gojuno/minimock/cmd/minimock"
+  "github.com/gojuno/minimock/cmd/minimock",
+  "github.com/pact-foundation/pact-go",
+  "github.com/tebeka/selenium",
+  "github.com/pmacik/loginusers-go",
 ]
 
 [[constraint]]
@@ -128,4 +131,16 @@ required = [
 
 [prune]
   go-tests = true
-  unused-packages = true 
+  unused-packages = true
+
+[[constraint]]
+  name = "github.com/pact-foundation/pact-go"
+  revision = "v1.0.0-beta.3"
+
+[[constraint]]
+  name = "github.com/tebeka/selenium"
+  revision = "master"
+
+[[constraint]]
+  name = "github.com/pmacik/loginusers-go"
+  revision = "master"

cico_run_contract_tests_provider.sh

@@ -1,4 +1,211 @@
 #!/bin/bash
 
-echo "This is the provider side of the contract testing."
-echo "The script will be filled when https://github.com/fabric8-services/fabric8-auth/pull/711 is merged."
+. cico_setup.sh
+
+CICO_RUN="${CICO_RUN:-true}"
+if [ "$CICO_RUN" == "true" ]; then
+    load_jenkins_vars;
+    if [ -e "jenkins-env.json" ]; then
+        regex="PACT_*\
+|ARCHIVE_ARTIFACTS\
+|JOB_NAME\
+|BUILD_NUMBER\
+|OSIO_USERNAME\
+|OSIO_PASSWORD\
+|OSIO_CLUSTER_URL\
+|ONLINE_REGISTRATION_SERVICE_ACCOUNT_CLIENT_ID\
+|ONLINE_REGISTRATION_SERVICE_ACCOUNT_CLIENT_SECRET"
+        eval "$(./env-toolkit load -f jenkins-env.json --regex $regex)"
+        export OSIO_CLUSTER_URL="${OSIO_CLUSTER_URL:-https://api.starter-us-east-2a.openshift.com/}"
+    fi
+    if [ "$ARCHIVE_ARTIFACTS" == "true" ]; then
+        artifacts_key="$(readlink -f ./artifacts.key)"
+        artifacts_key_path="/tmp/artifacts.key"
+        echo "Checking for $artifacts_key file..."
+        if [ -f $artifacts_key ]; then
+            echo "$artifacts_key found - preparing for archiving artifacts."
+            chmod 600 "$artifacts_key"
+            chown root:root "$artifacts_key"
+            mv -vf "$artifacts_key" "$artifacts_key_path"
+        else
+            echo "$artifacts_key does not found!"
+            exit 1
+        fi
+    fi
+    install_deps;
+    YUM_OPTS="-y -d1"
+    yum $YUM_OPTS install epel-release;
+    yum $YUM_OPTS --enablerepo=centosplus --enablerepo=epel install  \
+        chromium \
+        chromium-headless \
+        chromedriver \
+        docker-compose \
+        golang \
+        make;
+
+    # Aviod "to many open files" error
+    ulimit -Hn 999999
+    ulimit -Sn 999999
+    sysctl fs.inotify.max_user_watches=65536
+    sysctl fs.inotify.max_user_instances=2048
+
+    export GOPATH="/tmp/go"
+    F8_AUTH_DIR="$GOPATH/src/github.com/fabric8-services/fabric8-auth"
+    mkdir -p $F8_AUTH_DIR
+    mv * $F8_AUTH_DIR
+    mv .[!.]* $F8_AUTH_DIR
+    cd $F8_AUTH_DIR
+fi
+
+make build
+
+TMP_PATH="$(readlink -f tmp)"
+JOB_NAME="${JOB_NAME:-contract-testing-cico-job}"
+BUILD_NUMBER="${BUILD_NUMBER:-0}"
+
+ARTIFACTS_PATH="contracts/${JOB_NAME}/${BUILD_NUMBER}"
+LATEST_LINK_PATH="contracts/${JOB_NAME}/latest"
+
+OUTPUT_DIR="$TMP_PATH/test"
+mkdir -p "$OUTPUT_DIR/$ARTIFACTS_PATH"
+
+F8_CLUSTER_DIR="$GOPATH/src/github.com/fabric8-services/fabric8-cluster"
+if [ ! -d $F8_CLUSTER_DIR ]; then
+    git clone https://github.com/fabric8-services/fabric8-cluster $F8_CLUSTER_DIR
+fi
+
+set +e
+
+# Add Pact CLI to PATH
+export PATH="$TMP_PATH/pact/bin:$PATH"
+
+# Ensure Pact CLI is installed
+pact-mock-service version &> /dev/null
+test_pact_exit=$?
+if [ $test_pact_exit -ne 0 ]; then
+    curl -L -s https://github.com/pact-foundation/pact-ruby-standalone/releases/download/v1.64.0/pact-1.64.0-linux-x86_64.tar.gz -o "$TMP_PATH/pact-cli.tar.gz"
+    tar -xf "$TMP_PATH/pact-cli.tar.gz" --directory "$TMP_PATH"
+fi
+
+# Clean any running auth/cluster contaiers
+for i in $(docker ps -f name=cluster -f name=auth -q); do
+    docker rm -f $i
+done
+
+# Start Auth service
+AUTH_CLUSTER_URL_SHORT="http://localhost:8087" make dev &> "$OUTPUT_DIR/$ARTIFACTS_PATH/test-auth.log" &
+authpid=$!
+
+## Wait for the Auth service to start up
+wait_period=10
+attempts=18
+
+final_exit=0
+
+echo "Starting local Auth service"
+sleep $wait_period
+for i in $(seq 1 $attempts); do
+    echo "Attempt $i/$attempts..."
+    response_head="$(curl -LI --silent -XGET 'http://localhost:8089/api/status' | head -n 1)"
+    if [ -z "$response_head" ]; then
+        echo "Service unreachable - waiting for Auth service for ${wait_period}s ...";
+        sleep $wait_period;
+    else
+        response_code="$(echo $response_head | cut -d ' ' -f2)"
+        if [ $response_code -eq 200 ]; then
+            echo "The Auth service is up and running.";
+            break;
+        else
+            echo "Failed to start the Auth service";
+            echo $response_head;
+            kill $authpid;
+            final_exit=1;
+        fi
+    fi
+    if [ $i -eq $attempts ]; then
+        echo "Auth service failed to start in $attempts attempts."
+        kill $authpid;
+        final_exit=1;
+    fi
+done
+
+# Start Cluster service (Auth dependency)
+
+if [ $final_exit == 0 ]; then
+    CUR_DIR=$(pwd)
+    cd $F8_CLUSTER_DIR
+    F8_AUTH_URL="http://localhost:8089" make dev &> "$OUTPUT_DIR/$ARTIFACTS_PATH/test-cluster.log" &
+    clusterpid=$!
+
+    ## Wait for the Cluster service to start up
+    echo "Starting local Cluster service"
+    sleep $wait_period
+    for i in $(seq 1 $attempts); do
+        echo "Attempt $i/$attempts..."
+        response_head="$(curl -LI --silent -XGET 'http://localhost:8087/api/status' | head -n 1)"
+        if [ -z "$response_head" ]; then
+            echo "Service unreachable - waiting for Cluster service for ${wait_period}s ...";
+            sleep $wait_period;
+        else
+            response_code="$(echo $response_head | cut -d ' ' -f2)"
+            if [ $response_code -eq 200 ]; then
+                echo "The Cluster service is up and running.";
+                break;
+            else
+                echo "Failed to start the Cluster service";
+                echo $response_head;
+                kill $clusterpid;
+                kill $authpid;
+                final_exit=1;
+            fi
+        fi
+        if [ $i -eq $attempts ]; then
+            echo "Cluster service failed to start in $attempts attempts."
+            kill $clusterpid;
+            kill $authpid;
+            final_exit=1;
+        fi
+    done
+
+    cd $CUR_DIR
+fi
+
+if [ $final_exit == 0 ]; then
+    # Run the contract tests
+    GO_TEST_VERBOSITY_FLAG=-v make test-contracts-provider-no-coverage |& tee "$OUTPUT_DIR/$ARTIFACTS_PATH/test.log"
+    tests_exit=${PIPESTATUS[0]} #capture exit status of the make command
+
+    # Delete sensitive files
+    if [ "$CICO_RUN" == "true" ]; then
+        rm -rvf $OUTPUT_DIR/contracts/pacts
+        rm -rvf test/contracts/provider/log
+    fi
+fi
+
+set -x
+
+# Archive the test results
+if [ "$CICO_RUN" == "true" ] && [ "$ARCHIVE_ARTIFACTS" == "true" ]; then
+    echo
+    echo
+
+    echo "Archiving artifacts to http://artifacts.ci.centos.org/devtools/$ARTIFACTS_PATH"
+    cd $OUTPUT_DIR
+    ln -sfn "$BUILD_NUMBER" "$LATEST_LINK_PATH"
+
+    rsync --password-file="$artifacts_key_path" -qPHva --relative "./$ARTIFACTS_PATH" "$LATEST_LINK_PATH" [email protected]::devtools/
+    ARTIFACTS_UPLOAD_EXIT_CODE=$?
+
+    if [ $ARTIFACTS_UPLOAD_EXIT_CODE -eq 0 ]; then
+        echo "Artifacts were uploaded to http://artifacts.ci.centos.org/devtools/$ARTIFACTS_PATH"
+    else
+        echo "ERROR: Failed to upload artifacts to http://artifacts.ci.centos.org/devtools/$ARTIFACTS_PATH"
+    fi
+
+    echo
+    echo
+fi
+
+RTN_CODE=$(($tests_exit + $final_exit))
+
+exit $RTN_CODE

test/contracts/.gitignore

@@ -0,0 +1,3 @@
+provider/log
+pacts
+output

test/contracts/provider/model_test.go

@@ -0,0 +1,10 @@
+package provider_test
+
+// TestJWSToken contains Base64 encoded '{"alg":"RS256","kid":"0000000000000000000000000000000000000000000","typ":"JWT"}somerandombytes'
+const TestJWSToken = "eyJhbGciOiJSUzI1NiIsImtpZCI6IjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJ0eXAiOiJKV1QifXNvbWVyYW5kb21ieXRlcw"
+
+//TestUserID contains user id placeholder
+const TestUserID = "00000000-0000-4000-a000-000000000000"
+
+//TestUserName contains username placeholder
+const TestUserName = "testuser00000000"