Build Charac server and client with OIDC, SSH sessions, and packages

2026-10-05 14:02:50 +08:00
parent 4bc3552167
commit 0ea679932e
185 changed files with 10653 additions and 772 deletions
@@ -0,0 +1,54 @@
+using Microsoft.Extensions.Configuration;
+using Charac.Server.Authentication;
+
+namespace Charac.Server.Tests;
+
+public sealed class OidcSettingsTests
+{
+    [Fact]
+    public void ConfiguredIssuerUsesProviderDiscoveryByDefault()
+    {
+        var settings = OidcSettings.FromConfiguration(Configuration(new Dictionary<string, string?>
+        {
+            ["oidc:issuer"] = "https://auth.example.com/application/o/workspace-access/",
+            ["oidc:client_id"] = "workspace-client"
+        }));
+
+        Assert.Equal("https://auth.example.com/application/o/workspace-access/", settings!.Issuer);
+        Assert.Equal("workspace-client", settings.ClientId);
+        Assert.Equal("https://auth.example.com/application/o/workspace-access/.well-known/openid-configuration",
+            settings.DiscoveryUrl);
+    }
+
+    [Fact]
+    public void GlobalIssuerCanUseProviderSpecificDiscovery()
+    {
+        var settings = OidcSettings.FromConfiguration(Configuration(new Dictionary<string, string?>
+        {
+            ["oidc:issuer"] = "https://auth.example.com/",
+            ["oidc:client_id"] = "workspace-client",
+            ["oidc:discovery_url"] =
+                "https://auth.example.com/application/o/workspace-access/.well-known/openid-configuration"
+        }));
+
+        Assert.Equal("https://auth.example.com/", settings!.Issuer);
+        Assert.Contains("/application/o/workspace-access/", settings.DiscoveryUrl);
+    }
+
+    [Fact]
+    public void PartialOrInsecureOidcConfigurationIsRejected()
+    {
+        Assert.Null(OidcSettings.FromConfiguration(Configuration([])));
+        Assert.Throws<InvalidOperationException>(() => OidcSettings.FromConfiguration(
+            Configuration(new Dictionary<string, string?> { ["oidc:issuer"] = "https://auth.example.com/" })));
+        Assert.Throws<InvalidOperationException>(() => OidcSettings.FromConfiguration(
+            Configuration(new Dictionary<string, string?>
+            {
+                ["oidc:issuer"] = "http://auth.example.com/",
+                ["oidc:client_id"] = "workspace-client"
+            })));
+    }
+
+    private static IConfiguration Configuration(Dictionary<string, string?> values) =>
+        new ConfigurationBuilder().AddInMemoryCollection(values).Build();
+}