900b0608c1
GET /v1/users returns a bare JSON array, not a {"data":[...]} envelope
(total_count is a separate endpoint), so decode directly into a slice.
The previous envelope-first decode errored on the array and never
reached the fallback, so ListAccounts failed against the real API.
Treat deprovisioned users as inactive. Add the missing Clerk
third-party logo and its wiring, and document why the registration
sets no probe URL or name resolver.
Record the driver-test cassette against a live Clerk development
instance, scrubbed of PII and instance identifiers (emails to
example.com, image_url payloads and CF transport headers dropped).
A locked account verifies the inactive path.
Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
82 lines
2.7 KiB
Go
82 lines
2.7 KiB
Go
// Copyright (c) 2026 Probo Inc <hello@getprobo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package drivers
|
|
|
|
import (
|
|
"context"
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"go.probo.inc/probo/pkg/coredata"
|
|
)
|
|
|
|
func TestClerkDriver(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
rec := newRecorder(t, "testdata/clerk", "CLERK_SECRET_KEY")
|
|
client := newVCRClient(rec, bearerAuth(os.Getenv("CLERK_SECRET_KEY")))
|
|
|
|
driver := NewClerkDriver(client)
|
|
records, err := driver.ListAccounts(context.Background())
|
|
require.NoError(t, err)
|
|
require.Len(t, records, 3)
|
|
|
|
// Clerk returns users newest-first (default order_by=-created_at).
|
|
first := records[0]
|
|
assert.Equal(t, "user_3EfkCEWmtIsoMD3rRxIpDsBOPzv", first.ExternalID)
|
|
assert.Equal(t, "c@example.com", first.Email)
|
|
assert.Equal(t, "c c", first.FullName)
|
|
assert.Equal(t, coredata.AccessEntryAccountTypeUser, first.AccountType)
|
|
require.NotNil(t, first.Active)
|
|
assert.True(t, *first.Active)
|
|
assert.Equal(t, coredata.MFAStatusDisabled, first.MFAStatus)
|
|
assert.Equal(t, coredata.AccessEntryAuthMethodPassword, first.AuthMethod)
|
|
assert.NotNil(t, first.CreatedAt)
|
|
assert.Nil(t, first.LastLogin)
|
|
|
|
second := records[1]
|
|
assert.Equal(t, "b@example.com", second.Email)
|
|
assert.Equal(t, "b b", second.FullName)
|
|
require.NotNil(t, second.Active)
|
|
assert.True(t, *second.Active)
|
|
|
|
// a@example.com is locked, so it must be reported inactive.
|
|
third := records[2]
|
|
assert.Equal(t, "a@example.com", third.Email)
|
|
assert.Equal(t, "a a", third.FullName)
|
|
require.NotNil(t, third.Active)
|
|
assert.False(t, *third.Active)
|
|
assert.Equal(t, coredata.AccessEntryAuthMethodPassword, third.AuthMethod)
|
|
}
|
|
|
|
func TestClerkPrimaryEmail(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
user := clerkUser{
|
|
PrimaryEmailAddressID: new("eml_primary"),
|
|
EmailAddresses: []struct {
|
|
ID string `json:"id"`
|
|
EmailAddress string `json:"email_address"`
|
|
}{
|
|
{ID: "eml_secondary", EmailAddress: "secondary@example.com"},
|
|
{ID: "eml_primary", EmailAddress: "primary@example.com"},
|
|
},
|
|
}
|
|
|
|
assert.Equal(t, "primary@example.com", clerkPrimaryEmail(user))
|
|
}
|