pinniped/test/testlib/skip.go

// Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
// SPDX-License-Identifier: Apache-2.0

package testlib

import (
	"crypto/fips140"
	"testing"
)

// SkipUnlessIntegration skips the current test if `-short` has been passed to `go test`.
func SkipUnlessIntegration(t *testing.T) {
	t.Helper()

	if testing.Short() {
		t.Skip("skipping integration test because of '-short' flag")
	}
}

func SkipTestWhenUsingGOFIPS140(t *testing.T) {
	t.Helper()

	if fips140.Enabled() {
		t.Skip("this test is skipped when using GOFIPS140")
	}
}

func SkipTestUnlessUsingGOFIPS140(t *testing.T) {
	t.Helper()

	if !fips140.Enabled() {
		t.Skip("this test requires GOFIPS140")
	}
}

func SkipTestWhenLDAPIsUnavailable(t *testing.T, env *TestEnv) {
	t.Helper()

	if len(env.ToolsNamespace) == 0 && !env.HasCapability(CanReachInternetLDAPPorts) {
		t.Skip("LDAP integration test requires connectivity to an LDAP server")
	}
}

func SkipTestWhenActiveDirectoryIsUnavailable(t *testing.T, env *TestEnv) {
	t.Helper()

	if !env.HasCapability(CanReachInternetLDAPPorts) {
		t.Skip("Active Directory integration test requires network connectivity to an AD server")
	}

	if IntegrationEnv(t).SupervisorUpstreamActiveDirectory.Host == "" {
		t.Skip("Active Directory hostname not specified")
	}
}

func SkipTestWhenGitHubIsUnavailable(t *testing.T) {
	t.Helper()

	if IntegrationEnv(t).SupervisorUpstreamGithub.GithubAppClientID == "" {
		t.Skip("GitHub test env vars not specified")
	}
}

func SkipTestWhenGitHubOAuthClientCallbackDoesNotMatchFederationDomainIssuerCallback(t *testing.T) {
	t.Helper()

	SkipTestWhenGitHubIsUnavailable(t)

	env := IntegrationEnv(t)
	if env.SupervisorUpstreamGithub.GithubOAuthAppAllowedCallbackURL != env.SupervisorUpstreamOIDC.CallbackURL {
		t.Skip("GitHub OAuth App client allowed callback URL does not match the callback URL for the FederationDomain")
	}
}