test: add AppRole unit tests for namespace support

Signed-off-by: Hiram J. Pérez <hi@worg.xyz>

Author: worg

test/auth.appRole.test.js

@@ -0,0 +1,101 @@
+"use strict";
+
+require("co-mocha");
+
+const _ = require("lodash");
+const sinon = require("sinon");
+const chai = require("chai");
+const expect = chai.expect;
+chai.use(require("sinon-chai"));
+
+const VaultApiClient = require("../src/VaultApiClient");
+const VaultAppRoleAuth = require("../src/auth/VaultAppRoleAuth");
+const errors = require("../src/errors");
+
+const logger = _.fromPairs(
+  _.map(["error", "warn", "info", "debug", "trace"], (prop) => [prop, _.noop]),
+);
+
+describe("AppRole auth backend", function () {
+  function base64decode(str) {
+    return Buffer.from(str, "base64").toString();
+  }
+
+  function getAuthorizationHeaderRegExp(awsAccessKey) {
+    return new RegExp(
+      `^AWS4-HMAC-SHA256\\sCredential=${awsAccessKey}.+Signature=\\w+$`,
+    );
+  }
+
+  /**
+   * @returns {VaultApiClient}
+   */
+  function getApiStub() {
+    return sinon.createStubInstance(VaultApiClient);
+  }
+
+  describe("Vault Request", function () {
+    const mount = "approle";
+
+    it("Should make a correct vault login request with namespace", async () => {
+      const api = getApiStub();
+
+      const auth = new VaultAppRoleAuth(
+        api,
+        logger,
+        {
+          role_id: "role123",
+          secret_id: "secret456",
+          namespace: "ns1",
+        },
+        mount,
+      );
+
+      api.makeRequest
+        .withArgs("POST")
+        .resolves({ auth: { client_token: "fake_token" } });
+      sinon.stub(auth, "_getTokenEntity");
+
+      await auth._authenticate();
+
+      expect(
+        api.makeRequest.calledWith(
+          "POST",
+          "/auth/approle/login",
+          { role_id: "role123", secret_id: "secret456" },
+          { "X-Vault-Namespace": "ns1" },
+        ),
+      ).to.be.true;
+    });
+
+    it("Should not set namespace header if not provided", async () => {
+      const api = getApiStub();
+
+      const auth = new VaultAppRoleAuth(
+        api,
+        logger,
+        {
+          role_id: "role123",
+          secret_id: "secret456",
+        },
+        mount,
+      );
+
+      api.makeRequest
+        .withArgs("POST")
+        .resolves({ auth: { client_token: "fake_token" } });
+      sinon.stub(auth, "_getTokenEntity");
+
+      await auth._authenticate();
+
+      expect(
+        api.makeRequest.calledWith(
+          "POST",
+          "/auth/approle/login",
+          { role_id: "role123", secret_id: "secret456" },
+          {},
+        ),
+      ).to.be.true;
+    });
+  });
+});