DRIVERS-2924 test accessToken form of KMS providers (#1914)

Author: kevinAlbs

source/client-side-encryption/tests/unified/accessToken-azure.json

@@ -0,0 +1,107 @@
+description: accessToken-azure
+schemaVersion: "1.28" # For accessToken
+runOnRequirements:
+  - minServerVersion: "4.1.10"
+    csfle:
+      minLibmongocryptVersion: "1.6.0" # MONGOCRYPT-473.
+createEntities:
+  - client:
+      id: &client "client"
+      autoEncryptOpts:
+        keyVaultNamespace: keyvault.datakeys
+        kmsProviders:
+          azure: { accessToken: { $$placeholder: 1 } } # Use csfle/setup-secrets.sh from drivers-evergreen-tools to obtain token.
+  - database:
+      id: &db "db"
+      client: *client
+      databaseName: *db
+  - collection:
+      id: &coll "coll"
+      database: *db
+      collectionName: *coll
+  - clientEncryption:
+      id: &clientEncryption clientEncryption
+      clientEncryptionOpts:
+        keyVaultClient: *client
+        keyVaultNamespace: keyvault.datakeys
+        kmsProviders:
+          azure: { accessToken: { $$placeholder: 1 } } # Use csfle/setup-secrets.sh from drivers-evergreen-tools to obtain token.
+initialData:
+  - databaseName: *db
+    collectionName: *coll
+    documents: []
+    createOptions:
+      validator:
+        $jsonSchema: {
+            "properties":
+              {
+                "secret":
+                  {
+                    "encrypt":
+                      {
+                        "keyId": ["$binary": { "base64": "AZURE+AAAAAAAAAAAAAAAA==", "subType": "04" }],
+                        "bsonType": "string",
+                        "algorithm": "AEAD_AES_256_CBC_HMAC_SHA_512-Deterministic",
+                      },
+                  },
+              },
+            "bsonType": "object"
+          }
+  - databaseName: keyvault
+    collectionName: datakeys
+    documents:
+      - {
+          "_id": { "$binary": { "base64": "AZURE+AAAAAAAAAAAAAAAA==", "subType": "04" } },
+          "keyAltNames": ["my-key"],
+          "keyMaterial":
+            {
+              "$binary":
+                {
+                  "base64": "n+HWZ0ZSVOYA3cvQgP7inN4JSXfOH85IngmeQxRpQHjCCcqT3IFqEWNlrsVHiz3AELimHhX4HKqOLWMUeSIT6emUDDoQX9BAv8DR1+E1w4nGs/NyEneac78EYFkK3JysrFDOgl2ypCCTKAypkn9CkAx1if4cfgQE93LW4kczcyHdGiH36CIxrCDGv1UzAvERN5Qa47DVwsM6a+hWsF2AAAJVnF0wYLLJU07TuRHdMrrphPWXZsFgyV+lRqJ7DDpReKNO8nMPLV/mHqHBHGPGQiRdb9NoJo8CvokGz4+KE8oLwzKf6V24dtwZmRkrsDV4iOhvROAzz+Euo1ypSkL3mw==",
+                  "subType": "00",
+                },
+            },
+          "creationDate": { "$date": { "$numberLong": "1552949630483" } },
+          "updateDate": { "$date": { "$numberLong": "1552949630483" } },
+          "status": { "$numberInt": "0" },
+          "masterKey": { "provider": "azure", "keyVaultEndpoint": "key-vault-csfle.vault.azure.net", "keyName": "key-name-csfle" }
+        }
+tests:
+  - description: "Auto encrypt using access token Azure credentials"
+    operations:
+      - name: insertOne
+        arguments:
+          document: { _id: 1, secret: "string0" }
+        object: *coll
+    outcome:
+      - documents:
+          - {
+              _id: 1,
+              secret:
+                {
+                  "$binary":
+                    {
+                      "base64": "AQGVERPgAAAAAAAAAAAAAAAC5DbBSwPwfSlBrDtRuglvNvCXD1KzDuCKY2P+4bRFtHDjpTOE2XuytPAUaAbXf1orsPq59PVZmsbTZbt2CB8qaQ==",
+                      "subType": "06",
+                    },
+                },
+            }
+        collectionName: *coll
+        databaseName: *db
+  - description: "Explicit encrypt using access token Azure credentials"
+    operations:
+      - name: encrypt
+        object: *clientEncryption
+        arguments:
+          value: "string0"
+          opts:
+            keyAltName: "my-key"
+            algorithm: "AEAD_AES_256_CBC_HMAC_SHA_512-Deterministic"
+        expectResult:
+          {
+            "$binary":
+              {
+                "base64": "AQGVERPgAAAAAAAAAAAAAAAC5DbBSwPwfSlBrDtRuglvNvCXD1KzDuCKY2P+4bRFtHDjpTOE2XuytPAUaAbXf1orsPq59PVZmsbTZbt2CB8qaQ==",
+                "subType": "06",
+              }
+          }