providertest

type Config struct {
	// Provider is the authz.Authorizer implementation to test (required).
	Provider authz.Authorizer

	// OrgProvider is the authz.OrgAuthorizer implementation to test (optional).
	// If nil and Provider implements OrgAuthorizer, Provider will be used.
	OrgProvider authz.OrgAuthorizer

	// PlatformProvider is the authz.PlatformAuthorizer implementation to test (optional).
	// If nil and Provider implements PlatformAuthorizer, Provider will be used.
	PlatformProvider authz.PlatformAuthorizer

	// DecisionProvider is the authz.DecisionAuthorizer implementation to test (optional).
	// If nil and Provider implements DecisionAuthorizer, Provider will be used.
	DecisionProvider authz.DecisionAuthorizer

	// SkipIntegration skips integration tests that may require external setup.
	SkipIntegration bool

	// Timeout for test operations. Default: 30 seconds.
	Timeout time.Duration

	// TestPrincipalID is a UUID for test principals. Default: random UUID.
	TestPrincipalID uuid.UUID

	// TestOrgID is a UUID for test organizations. Default: random UUID.
	TestOrgID uuid.UUID

	// TestResourceID is a UUID for test resources. Default: random UUID.
	TestResourceID uuid.UUID

	// GrantOrgRole, when set, gives principalID a role in orgID, enabling
	// the organization permission tests.
	GrantOrgRole func(t *testing.T, orgID, principalID uuid.UUID, role string)

	// GrantManager, when set, records that managerID manages managedID
	// with a manager role, enabling the manager relation tests (ADR-005).
	GrantManager func(t *testing.T, managedID, managerID uuid.UUID, role string)

	// ResourceGranter is the grant contract under test (ADR-008), enabling
	// RunResourceGrantTests. It is usually the Provider itself.
	ResourceGranter authz.ResourceGranter

	// NewPrincipal returns an identifier of a principal the provider can
	// grant to; a provider backed by a database creates the row. Default:
	// a random UUID.
	NewPrincipal func(t *testing.T) uuid.UUID

	// NewOrganization returns an identifier of an organization with no
	// members; a provider backed by a database creates the row. Default:
	// a random UUID.
	NewOrganization func(t *testing.T) uuid.UUID

	// RegisterResource, when set, is called once for each resource before
	// the test grants on it, for providers that need the resource linked
	// to its organization (the relationship-based provider writes the
	// resource's org relation, which the application does when it creates
	// the resource).
	RegisterResource func(t *testing.T, resource authz.ResourceRef)

	// SetupFunc is called before each test to configure the provider.
	// Use this to set up roles, permissions, etc.
	SetupFunc func(t *testing.T)
}

type MockProvider struct {

	// Test hooks for customization
	CanFunc             func(ctx context.Context, principal authz.Principal, action authz.Action, resource authz.Resource) (bool, error)
	IsPlatformAdminFunc func(ctx context.Context, principal authz.Principal) (bool, error)
	// contains filtered or unexported fields
}