cd6c46212a
Route audit-log and SCIM-event exports through export_jobs with typed arguments, an iam BuildAndUploadExport/SendExportEmail implementation, and a concurrent export-job worker with stale recovery. Stream JSONL via page.WalkAll into S3, and expose the request flow on console, connect, MCP, and CLI. Co-authored-by: Bryan Frimin <bryan@getprobo.com> Signed-off-by: Sacha Al Himdani <sacha@probo.com>
92 lines
2.8 KiB
Go
92 lines
2.8 KiB
Go
// Copyright (c) 2026 Probo Inc <hello@getprobo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package console_test
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"go.probo.inc/probo/e2e/internal/testutil"
|
|
)
|
|
|
|
func TestSCIMEvent_Export(t *testing.T) {
|
|
t.Parallel()
|
|
owner := testutil.NewClient(t, testutil.RoleOwner)
|
|
|
|
const mutation = `
|
|
mutation($input: RequestSCIMEventExportInput!) {
|
|
requestSCIMEventExport(input: $input) {
|
|
exportJobId
|
|
}
|
|
}
|
|
`
|
|
|
|
t.Run("owner can request export", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
var result struct {
|
|
RequestSCIMEventExport struct {
|
|
ExportJobID string `json:"exportJobId"`
|
|
} `json:"requestSCIMEventExport"`
|
|
}
|
|
|
|
err := owner.ExecuteConnect(mutation, map[string]any{
|
|
"input": map[string]any{
|
|
"organizationId": owner.GetOrganizationID().String(),
|
|
"fromTime": "2026-01-01T00:00:00Z",
|
|
"toTime": "2026-03-24T00:00:00Z",
|
|
},
|
|
}, &result)
|
|
require.NoError(t, err)
|
|
assert.NotEmpty(t, result.RequestSCIMEventExport.ExportJobID)
|
|
})
|
|
|
|
t.Run("admin can request export", func(t *testing.T) {
|
|
t.Parallel()
|
|
admin := testutil.NewClientInOrg(t, testutil.RoleAdmin, owner)
|
|
|
|
var result struct {
|
|
RequestSCIMEventExport struct {
|
|
ExportJobID string `json:"exportJobId"`
|
|
} `json:"requestSCIMEventExport"`
|
|
}
|
|
|
|
err := admin.ExecuteConnect(mutation, map[string]any{
|
|
"input": map[string]any{
|
|
"organizationId": admin.GetOrganizationID().String(),
|
|
"fromTime": "2026-01-01T00:00:00Z",
|
|
"toTime": "2026-03-24T00:00:00Z",
|
|
},
|
|
}, &result)
|
|
require.NoError(t, err)
|
|
assert.NotEmpty(t, result.RequestSCIMEventExport.ExportJobID)
|
|
})
|
|
|
|
t.Run("viewer cannot request export", func(t *testing.T) {
|
|
t.Parallel()
|
|
viewer := testutil.NewClientInOrg(t, testutil.RoleViewer, owner)
|
|
|
|
_, err := viewer.DoConnect(mutation, map[string]any{
|
|
"input": map[string]any{
|
|
"organizationId": viewer.GetOrganizationID().String(),
|
|
"fromTime": "2026-01-01T00:00:00Z",
|
|
"toTime": "2026-03-24T00:00:00Z",
|
|
},
|
|
})
|
|
testutil.RequireForbiddenError(t, err, "viewer cannot request SCIM event export")
|
|
})
|
|
}
|