token-server: Delegation config import, validation and evaluation.

tokenserver/appengine/utils/identityset/identityset_test.go

 // Copyright 2016 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package identityset
 
 import (
         "testing"
 
         "golang.org/x/net/context"
 
         "github.com/luci/luci-go/server/auth"
         "github.com/luci/luci-go/server/auth/authtest"
         "github.com/luci/luci-go/server/auth/identity"
 
         . "github.com/luci/luci-go/common/testing/assertions"
         . "github.com/smartystreets/goconvey/convey"
 )
 
 func TestFromStrings(t *testing.T) {
         Convey("Empty", t, func() {
                 s, err := FromStrings(nil, nil)
                 So(err, ShouldBeNil)
                 So(s, ShouldResemble, &Set{})
                 So(s.IsEmpty(), ShouldBeTrue)
+                So(s.ToStrings(), ShouldResemble, []string{})
         })
 
         Convey("Universal", t, func() {
                 s, err := FromStrings([]string{"*", "user:abc@example.com"}, nil)
                 So(err, ShouldBeNil)
                 So(s, ShouldResemble, &Set{All: true})
                 So(s.IsEmpty(), ShouldBeFalse)
+                So(s.ToStrings(), ShouldResemble, []string{"*"})
         })
 
         Convey("Normal", t, func() {
                 s, err := FromStrings([]string{
                         "user:abc@example.com",
                         "user:def@example.com",
                         "user:abc@example.com",
                         "skipped",
                         "group:abc",
                         "group:def",
                         "group:abc",
                 }, func(s string) bool { return s == "skipped" })
                 So(err, ShouldBeNil)
                 So(s, ShouldResemble, &Set{
                         IDs: identSet{
                                 "user:abc@example.com": struct{}{},
                                 "user:def@example.com": struct{}{},
                         },
                         Groups: groupSet{
                                 "abc": struct{}{},
                                 "def": struct{}{},
                         },
                 })
                 So(s.IsEmpty(), ShouldBeFalse)
+                So(s.ToStrings(), ShouldResemble, []string{
+                        "group:abc",
+                        "group:def",
+                        "user:abc@example.com",
+                        "user:def@example.com",
+                })
         })
 
         Convey("Bad group entry", t, func() {
                 s, err := FromStrings([]string{"group:"}, nil)
                 So(err, ShouldErrLike, "invalid entry")
                 So(s, ShouldEqual, nil)
         })
 
         Convey("Bad ID entry", t, func() {
                 s, err := FromStrings([]string{"shrug"}, nil)
@@ skipping 182 matching lines @@
                 }, nil)
                 So(Extend(set, "user:abc@example.com"), ShouldResemble, &Set{
                         IDs: identSet{
                                 "user:abc@example.com": struct{}{},
                                 "user:def@example.com": struct{}{},
                         },
                         Groups: groupSet{"abc": struct{}{}},
                 })
         })
 }