feat: add test for EXTERNAL auth

Author: david-mohr

.gitignore

@@ -2,3 +2,4 @@ dist/
 node_modules/
 performance_test/node_modules
 .envrc
+tls-gen/

Makefile

@@ -6,4 +6,16 @@ rabbitmq-cluster:
 	cd cluster; docker build -t haproxy-rabbitmq-cluster  .
 	cd cluster; chmod 755 -R tls-gen 
 	cd cluster; docker compose down
-	cd cluster; docker compose up -d
+	cd cluster; docker compose up -d
+
+rabbitmq-test:
+	rm -rf tls-gen;
+	git clone https://github.com/rabbitmq/tls-gen tls-gen; cd tls-gen/basic; CN=rabbitmq make
+	chmod 755 -R tls-gen
+	docker compose down
+	docker compose up -d
+	sleep 5
+	docker exec rabbitmq-stream rabbitmqctl await_startup
+	docker exec rabbitmq-stream rabbitmqctl add_user 'O=client,CN=rabbitmq' ''
+	docker exec rabbitmq-stream rabbitmqctl clear_password 'O=client,CN=rabbitmq'
+	docker exec rabbitmq-stream rabbitmqctl set_permissions 'O=client,CN=rabbitmq' '.*' '.*' '.*'

README.md

@@ -374,7 +374,7 @@ npm i
 run the docker-compose to launch a rabbit instance already stream enabled
 
 ```shell
-docker-compose up -d
+make rabbitmq-test
 ```
 
 add this line to your host file (on linux `/etc/hosts`) to correctly resolve rabbitmq
@@ -400,7 +400,7 @@ npm run build
 Test:
 
 ```shell
-docker-compose up -d
+make rabbitmq-test
 npm run test
 ```
 

conf/enabled_plugins

@@ -1 +1 @@
-[rabbitmq_management,rabbitmq_prometheus,rabbitmq_stream_management].
+[rabbitmq_management,rabbitmq_prometheus,rabbitmq_stream_management,rabbitmq_auth_mechanism_ssl].

conf/rabbitmq.conf

@@ -0,0 +1,15 @@
+loopback_users.guest = false
+
+ssl_options.cacertfile = /certs/ca_certificate.pem
+ssl_options.certfile = /certs/server_rabbitmq_certificate.pem
+ssl_options.keyfile = /certs/server_rabbitmq_key.pem
+listeners.ssl.default = 5671
+listeners.tcp.default = 5672
+stream.listeners.tcp.default = 5552
+stream.listeners.ssl.default = 5551
+auth_mechanisms.1 = PLAIN
+auth_mechanisms.2 = EXTERNAL
+ssl_options.verify               = verify_peer
+ssl_options.fail_if_no_peer_cert = false
+log.file.level = debug
+log.console = true

docker-compose.yaml

@@ -1,5 +1,3 @@
-version: "2"
-
 services:
   rabbitmq-stream:
     image: rabbitmq:3.13-rc-management
@@ -8,10 +6,13 @@ services:
     hostname: "rabbitmq"
     ports:
       - "15672:15672"
+      - "5671:5671"
       - "5672:5672"
+      - "5551:5551"
       - "5552:5552"
     environment:
       RABBITMQ_DEFAULT_USER: "rabbit"
       RABBITMQ_DEFAULT_PASS: "rabbit"
     volumes:
-      - ./conf/enabled_plugins:/etc/rabbitmq/enabled_plugins
+     - ./conf/:/etc/rabbitmq/
+     - "./tls-gen/basic/result/:/certs"

test/e2e/connect.test.ts

@@ -1,10 +1,29 @@
 import { expect } from "chai"
-import { Client } from "../../src"
+import { Client, connect } from "../../src"
 import { createClient } from "../support/fake_data"
 import { Rabbit } from "../support/rabbit"
 import { eventually, username, password } from "../support/util"
+import { getTestNodesFromEnv } from "../support/util"
 import { Version } from "../../src/versions"
 import { randomUUID } from "node:crypto"
+import { readFile } from "node:fs/promises"
+
+async function createTlsClient(): Promise<Client> {
+  const [firstNode] = getTestNodesFromEnv()
+  return connect(
+    {
+      hostname: firstNode.host,
+      port: 5551,
+      mechanism: 'EXTERNAL',
+      ssl: {
+        ca: await readFile("./tls-gen/basic/result/ca_certificate.pem"),
+        cert: await readFile("./tls-gen/basic/result/client_rabbitmq_certificate.pem"),
+        key: await readFile("./tls-gen/basic/result/client_rabbitmq_key.pem"),
+      },
+      vhost: "/",
+    }
+  )
+}
 
 describe("connect", () => {
   let client: Client
@@ -28,6 +47,14 @@ describe("connect", () => {
     }, 5000)
   }).timeout(10000)
 
+  it("using EXTERNAL auth", async () => {
+    client = await createTlsClient()
+
+    await eventually(async () => {
+      expect(await rabbit.getConnections()).lengthOf(1)
+    }, 5000)
+  }).timeout(10000)
+
   it("declaring connection name", async () => {
     const connectionName = `connection-name-${randomUUID()}`
     client = await createClient(username, password, undefined, undefined, undefined, undefined, connectionName)