test: iam integration tests

common/lib/authentication/iam_authentication_plugin.ts

@@ -90,7 +90,7 @@ export class IamAuthenticationPlugin extends AbstractConnectionPlugin {
     this.pluginService.updateConfigWithProperties(props);
 
     try {
-      return connectFunc();
+      return await connectFunc();
     } catch (e) {
       logger.debug(Messages.get("IamAuthenticationPlugin.connectException", (e as Error).message));
       if (!this.pluginService.isLoginError(e as Error) || !isCachedToken) {

tests/integration/container/tests/basic_connectivity.test.ts

@@ -1,12 +1,12 @@
 /*
   Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
- 
+
   Licensed under the Apache License, Version 2.0 (the "License").
   You may not use this file except in compliance with the License.
   You may obtain a copy of the License at
- 
+
   http://www.apache.org/licenses/LICENSE-2.0
- 
+
   Unless required by applicable law or agreed to in writing, software
   distributed under the License is distributed on an "AS IS" BASIS,
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

tests/integration/container/tests/iam_authentication.test.ts

@@ -0,0 +1,160 @@
+/*
+  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+  Licensed under the Apache License, Version 2.0 (the "License").
+  You may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { TestEnvironment } from "./utils/test_environment";
+import { DriverHelper } from "./utils/driver_helper";
+import { AwsWrapperError } from "aws-wrapper-common-lib/lib/utils/errors";
+import { promisify } from "util";
+import { lookup } from "dns";
+import { readFileSync } from "fs";
+import { AwsPGClient } from "pg-wrapper";
+import { AwsMySQLClient } from "mysql-wrapper";
+import { IamAuthenticationPlugin } from "aws-wrapper-common-lib/lib/authentication/iam_authentication_plugin";
+
+let env: TestEnvironment;
+let driver;
+let initClientFunc: (props: any) => any;
+
+const sslCertificate = {
+  ca: readFileSync("/app/global-bundle.pem").toString()
+};
+
+function getIpAddress(host: string) {
+  return promisify(lookup)(host, {});
+}
+
+async function initDefaultConfig(host: string): Promise<any> {
+  const env = await TestEnvironment.getCurrent();
+
+  let props = {
+    user: "jane_doe",
+    host: host,
+    database: env.databaseInfo.default_db_name,
+    password: env.databaseInfo.password,
+    port: env.databaseInfo.clusterEndpointPort,
+    plugins: "iam",
+    ssl: sslCertificate
+  };
+  props = DriverHelper.addDriverSpecificConfiguration(props, env.engine);
+  return props;
+}
+
+async function validateConnection(client: AwsPGClient | AwsMySQLClient) {
+  try {
+    await client.connect();
+    const res = await DriverHelper.executeQuery(env.engine, client, "select 1");
+    expect(res).not.toBeNull();
+  } finally {
+    await client.end();
+  }
+}
+
+describe("iamTests", () => {
+  beforeAll(async () => {
+    env = await TestEnvironment.getCurrent();
+    driver = DriverHelper.getDriverForDatabaseEngine(env.engine);
+    initClientFunc = DriverHelper.getClient(driver);
+  });
+
+  beforeEach(async () => {
+    IamAuthenticationPlugin.clearCache();
+  });
+
+  it("testIamWrongDatabaseUsername", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["user"] = `WRONG_${env.info.databaseInfo.username}_USER`;
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      console.log(error);
+    });
+
+    await expect(client.connect()).rejects.toThrow();
+  }, 100000);
+
+  it("testIamNoDatabaseUsername", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["user"] = undefined;
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      console.log(error);
+    });
+
+    await expect(client.connect()).rejects.toBeInstanceOf(AwsWrapperError);
+  }, 100000);
+
+  it("testIamInvalidHost", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["iamHost"] = "<>";
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      console.log(error);
+    });
+
+    await expect(client.connect()).rejects.toBeInstanceOf(AwsWrapperError);
+  }, 100000);
+
+  // Currently, PG cannot connect to an IP address with SSL enabled, skip if PG
+  it("testIamUsingIpAddress", async () => {
+    if (env.engine === "MYSQL") {
+      const instance = env.writer;
+      if (instance.host) {
+        const ip = await getIpAddress(instance.host);
+        const config = await initDefaultConfig(ip.address);
+
+        config["password"] = "anything";
+        config["iamHost"] = instance.host;
+
+        const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+        client.on("error", (error: any) => {
+          console.log(error);
+        });
+
+        await validateConnection(client);
+      } else {
+        throw new AwsWrapperError("Host not found");
+      }
+    }
+    return;
+  }, 100000);
+
+  it("testIamValidConnectionProperties", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["password"] = "anything";
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      console.log(error);
+    });
+
+    await validateConnection(client);
+  }, 100000);
+
+  it("testIamValidConnectionPropertiesNoPassword", async () => {
+    const config = await initDefaultConfig(env.databaseInfo.clusterEndpoint);
+    config["password"] = undefined;
+    const client: AwsPGClient | AwsMySQLClient = initClientFunc(config);
+
+    client.on("error", (error: any) => {
+      console.log(error);
+    });
+
+    await validateConnection(client);
+  }, 100000);
+});

tests/integration/host/src/test/java/integration/host/util/ContainerHelper.java

@@ -164,6 +164,7 @@ public T withFixedExposedPort(int hostPort, int containerPort) {
         .withFileSystemBind("../../../pg", "/app/pg", BindMode.READ_ONLY)
         .withFileSystemBind("../../../mysql", "/app/mysql", BindMode.READ_ONLY)
         .withFileSystemBind("../../../common", "/app/common", BindMode.READ_ONLY)
+        .withFileSystemBind("../../../tests/integration/host/src/test/resources/global-bundle.pem", "/app/global-bundle.pem", BindMode.READ_ONLY)
         .withFileSystemBind("../../../jest.integration.config.json", "/app/jest.integration.config.json", BindMode.READ_ONLY)
         .withFileSystemBind("../../../tsconfig.json", "/app/tsconfig.json", BindMode.READ_ONLY)
         .withFileSystemBind("../../../package.json", "/app/package.json", BindMode.READ_ONLY)