Rryktest(e2e): add end-to-end coverage for RBS, RBC, and tools workflows

7b51404d创建于 3 天前历史提交

文件	最后提交记录	最后更新时间
client	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
policies	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
resources	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
token	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
users	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
version	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
.gitkeep	test(tests): add pytest e2e suite for workspace Add pytest e2e under tests/e2e/ with common.sh helpers and RBS fixtures. Document test framework in tests/README.md and AGENTS.md.	1 个月前
README.md	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
__init__.py	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
support.py	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
test_global_options.py	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
test_https.py	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前
test_lifecycle.py	test(e2e): add end-to-end coverage for RBS, RBC, and tools workflows	3 天前

tools e2e

Markers: e2e + tools. Tests invoke the real rbs-cli binary against a shared RBS/OpenBao/Fake GTA deployment whose SQLite API data resets after each test.

Coverage is split by command family and operation:

client/: challenge, collect-evidence, get-token, and separate token/evidence/passport/background resource modes, including parser and auth-mode validation.
users/: list/create/get/update/delete, complete response contracts, JWK input, pagination, path validation, and not-found behavior.
policies/: list/create/get/update/delete, response/version contracts, pagination, path validation, and delete target validation.
resources/: create/info/update/get/delete, metadata/content/JWE contracts, URI/export-mode validation, and not-found behavior.
token/: PS256 generation, custom claims, and malformed claims validation.
version/: JSON and text output contracts.
test_lifecycle.py: one serial client challenge → evidence → token → resource/decrypt flow.
test_https.py: real HTTPS --cert verification, wrong/missing CA failures, and complete HTTPS resource retrieval.
test_global_options.py: --quiet, --noout, --verbose, and invalid global input handling.

Attestation policy, certificate/CRL, and reference-value commands are intentionally out of scope until their CLI adapters are available.

Run with:

./tests/run_e2e.sh --suite tools