Add tools to run e2e tests locally

Author: exanubes

.env.dev.example

@@ -94,6 +94,12 @@ jobs:
 
           echo "OIDC_SCOPE=$(terraform output -raw oidc_scope)" >> "$GITHUB_ENV"
 
+          echo "APPSYNC_E2E_NS_API_KEY=$(terraform output -raw namespace_api_key)" >> "$GITHUB_ENV"
+          echo "APPSYNC_E2E_NS_IAM=$(terraform output -raw namespace_iam)" >> "$GITHUB_ENV"
+          echo "APPSYNC_E2E_NS_LAMBDA=$(terraform output -raw namespace_lambda)" >> "$GITHUB_ENV"
+          echo "APPSYNC_E2E_NS_COGNITO=$(terraform output -raw namespace_cognito)" >> "$GITHUB_ENV"
+          echo "APPSYNC_E2E_NS_OIDC=$(terraform output -raw namespace_oidc)" >> "$GITHUB_ENV"
+
       - name: Create Cognito user and export ID token
         run: |
           set -euo pipefail

.github/workflows/e2e.yaml

@@ -1,4 +1,5 @@
 .env
+.env.e2e
 dist/
 
 **/.terraform

.gitignore

@@ -1 +1 @@
-1.24.13
+1.26.2

.go-version

@@ -1,54 +1,19 @@
-include .env
-export
-
-.PHONY: deploy destroy plan dev tf-output build-authorizer create-user authenticate-user oauth-user
-
-deploy:
-	cd terraform && terraform apply -auto-approve
-
-destroy:
-	cd terraform && terraform destroy -auto-approve
-
-plan:
-	cd terraform && terraform plan
-
-tf-output:
-	cd terraform && terraform output
-
-dev:
-	APPSYNC_API_KEY=$(APPSYNC_API_KEY) \
-	HTTP_ENDPOINT=$(HTTP_ENDPOINT) \
-	WS_ENDPOINT=$(WS_ENDPOINT) \
-	CHANNEL=$(CHANNEL) \
-	AWS_REGION=$(AWS_REGION) \
-	ID_TOKEN=$(ID_TOKEN) \
-	OIDC_TOKEN=$(OIDC_TOKEN) \
-	go run ./internal/cmd/dev/
+.PHONY: build-authorizer e2e e2e-setup e2e-test e2e-teardown
 
 build-authorizer:
 	mkdir -p dist/authorizer
 	GOOS=linux GOARCH=arm64 go build -o dist/authorizer/bootstrap ./internal/cmd/authorizer/
 	cd dist/authorizer && zip -j function.zip bootstrap
 
-create-user:
-ifndef USERNAME
-	$(error USERNAME is not set. Usage: make create-user USERNAME=<user> PASSWORD=<pass>)
-endif
-ifndef PASSWORD
-	$(error PASSWORD is not set. Usage: make create-user USERNAME=<user> PASSWORD=<pass>)
-endif
-	bash scripts/create-user.sh "$(USERNAME)" "$(PASSWORD)"
-	$(MAKE) authenticate-user
+e2e-setup:
+	bash scripts/e2e-setup.sh
 
-authenticate-user:
-ifndef USERNAME
-	$(error USERNAME is not set. Usage: make authenticate-user USERNAME=<user> PASSWORD=<pass>)
-endif
-ifndef PASSWORD
-	$(error PASSWORD is not set. Usage: make authenticate-user USERNAME=<user> PASSWORD=<pass>)
-endif
-	bash scripts/authenticate-user.sh "$(USERNAME)" "$(PASSWORD)"
+e2e-test:
+	set -a && source .env.e2e && set +a && \
+	go test -tags=e2e ./e2e -count=1 -timeout=3m -v
 
-oauth-user:
-	bash scripts/oauth-user.sh
+e2e-teardown:
+	bash scripts/e2e-teardown.sh
 
+e2e: e2e-setup
+	$(MAKE) e2e-test; $(MAKE) e2e-teardown

Makefile

@@ -28,7 +28,7 @@ func TestAppSyncAuthorizers(t *testing.T) {
 	cases := []auth_case{
 		{
 			name:      "api_key",
-			namespace: "api-key-e2e",
+			namespace: require_env(t, "APPSYNC_E2E_NS_API_KEY"),
 			authz: func(endpoint string) (authorizer.Authorizer, error) {
 				return authorizer.ApiKey(authorizer.ApiKeyAuthorizerConfig{
 					ApiKey:   require_env(t, "APPSYNC_E2E_API_KEY"),
@@ -38,7 +38,7 @@ func TestAppSyncAuthorizers(t *testing.T) {
 		},
 		{
 			name:      "iam",
-			namespace: "iam-e2e",
+			namespace: require_env(t, "APPSYNC_E2E_NS_IAM"),
 			authz: func(endpoint string) (authorizer.Authorizer, error) {
 				return authorizer.IAM(authorizer.IAMAuthorizerConfig{
 					Region:   aws_region,
@@ -48,7 +48,7 @@ func TestAppSyncAuthorizers(t *testing.T) {
 		},
 		{
 			name:      "lambda",
-			namespace: "lambda-e2e",
+			namespace: require_env(t, "APPSYNC_E2E_NS_LAMBDA"),
 			authz: func(endpoint string) (authorizer.Authorizer, error) {
 				return authorizer.Token(authorizer.TokenAuthorizerConfig{
 					AuthToken: require_env(t, "APPSYNC_E2E_LAMBDA_TOKEN"),
@@ -58,7 +58,7 @@ func TestAppSyncAuthorizers(t *testing.T) {
 		},
 		{
 			name:      "cognito",
-			namespace: "cognito-e2e",
+			namespace: require_env(t, "APPSYNC_E2E_NS_COGNITO"),
 			authz: func(endpoint string) (authorizer.Authorizer, error) {
 				return authorizer.Token(authorizer.TokenAuthorizerConfig{
 					AuthToken: require_env(t, "APPSYNC_E2E_COGNITO_ID_TOKEN"),
@@ -68,7 +68,7 @@ func TestAppSyncAuthorizers(t *testing.T) {
 		},
 		{
 			name:      "oidc",
-			namespace: "oidc-e2e",
+			namespace: require_env(t, "APPSYNC_E2E_NS_OIDC"),
 			authz: func(endpoint string) (authorizer.Authorizer, error) {
 				return authorizer.Token(authorizer.TokenAuthorizerConfig{
 					AuthToken: require_env(t, "APPSYNC_E2E_OIDC_TOKEN"),

e2e/e2e_test.go

@@ -1,6 +1,6 @@
 module github.com/exanubes/appsync
 
-go 1.24
+go 1.26
 
 require (
 	github.com/aws/aws-lambda-go v1.54.0