60628645ae
Two OAuth2 and two API-key connectors:
- Google Analytics (GA4): OAuth2 with both analytics.readonly and
analytics.manage.users.readonly (readonly alone 403s on the accounts
list); v1alpha accessBindings enumerated at account and property level
and merged by email; manual account picker (Pattern 1) with a
per-connection probe and name resolver; distinct from Google Workspace.
- Dotfile: API key in the X-DOTFILE-API-KEY header (Pattern 3); GET
/v1/users (owner/admin, suspended_at) with a static probe.
- Segment (Twilio): Public API token as Bearer with a required Region
setting (US or EU) mapped to the regional host; GET /users plus per-user
GET /users/{id} for roles and /invites for pending members; per-connection
BuildProbeURL.
- Square: OAuth2 (EMPLOYEES_READ) or a personal access token (Pattern 3);
POST /v2/team-members/search returns email/status/is_owner directly, so no
role resolution; custom probe and name resolver.
Google Analytics and Square are confidential OAuth clients, wired into the
bootstrap OAuth provider list and .env.example. Segment carries a required
extra setting, so the console add-source dialog maps region onto its
segmentRegion API-key input; without that mapping the value is silently
dropped and the create is rejected.
Cassette-backed driver tests plus unit tests for the Segment probe URL and
the bootstrap OAuth provider list.
Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
63 lines
2.2 KiB
Go
63 lines
2.2 KiB
Go
// Copyright (c) 2026 Probo Inc <hello@probo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package drivers
|
|
|
|
import (
|
|
"context"
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestSquareDriver(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
rec := newRecorder(t, "testdata/square", "SQUARE_ACCESS_TOKEN")
|
|
client := newVCRClient(rec, bearerAuth(os.Getenv("SQUARE_ACCESS_TOKEN")))
|
|
|
|
driver := NewSquareDriver(client)
|
|
records, err := driver.ListAccounts(context.Background())
|
|
require.NoError(t, err)
|
|
require.Len(t, records, 3)
|
|
|
|
// Non-owner, ACTIVE → Member, active, not admin.
|
|
member := records[0]
|
|
assert.Equal(t, "-3oZQKPKVk6gUXU_V5Qa", member.ExternalID)
|
|
assert.Equal(t, "sherlock.holmes@example.com", member.Email)
|
|
assert.Equal(t, "Sherlock Holmes", member.FullName)
|
|
assert.False(t, member.IsAdmin)
|
|
assert.Equal(t, []string{"Member"}, member.Roles)
|
|
require.NotNil(t, member.Active)
|
|
assert.True(t, *member.Active)
|
|
|
|
// Owner → is_owner drives IsAdmin directly.
|
|
owner := records[1]
|
|
assert.Equal(t, "Pw67AzUomYUdF04AN17i", owner.ExternalID)
|
|
assert.Equal(t, "john.watson@example.com", owner.Email)
|
|
assert.True(t, owner.IsAdmin)
|
|
assert.Equal(t, []string{"Owner"}, owner.Roles)
|
|
require.NotNil(t, owner.Active)
|
|
assert.True(t, *owner.Active)
|
|
|
|
// INACTIVE member → active=false.
|
|
inactive := records[2]
|
|
assert.Equal(t, "martha.hudson@example.com", inactive.Email)
|
|
assert.False(t, inactive.IsAdmin)
|
|
require.NotNil(t, inactive.Active)
|
|
assert.False(t, *inactive.Active)
|
|
}
|