--Task-- name: Validation_user_idm enabled: True class_name: CheckUserTask source_name: idm source_namespace: >default< target_name: idm target_namespace: >default< start: 0 stop: None timeout: not yet initialized for this Task as timeout was not explicitly defined, see updates bellow loop: False interval: None dependencies: [] wait_for: [] options: {} group_name: None Current dir: /mnt/disks/data/xslou/lodestar-fork/pyrock ________________________________________________________________________________ [13/May/2023 00:55:29] Validation_user_idm pre : N/A ________________________________________________________________________________ [13/May/2023 00:55:29] - INFO: Timeout for this Task has changed to 8h (28800 seconds) [13/May/2023 00:55:29] - INFO: timeout was set to Task default (2x global_duration or 300 seconds (whatever is higher)), because it was unset ________________________________________________________________________________ [13/May/2023 00:55:29] Validation_user_idm step1 : Make sure we can create a user ________________________________________________________________________________ [LoginSession] Get "access_token" token for user "amadmin" [LoginSession] Obtaining new "access_token" token from server because it was not obtained yet for the user [LoginSession] Get "token_id" token for user "amadmin" [LoginSession] re-using "token_id" token that remains valid for 23m 45s Obtain Oauth2 authz code via REST Oauth2 authorize for access token [http_cmd]: curl -H "Content-Type: application/x-www-form-urlencoded" -X POST --cookie "amlbcookie=01" --cookie "iPlanetDirectoryPro=oVS0tvHBhjqGv-0Kelltu9wIkqo.*AAJTSQACMDIAAlNLABxTcTNwVEtxK29XRjlsbThQNzUwZVAzVVdGZEU9AAR0eXBlAANDVFMAAlMxAAIwMQ..*" --cookie "route=1683938965.342.18917.634825|f60edb382037eb2df1e800d563ad78a7" --data '{"decision": "Allow", "csrf": "oVS0tvHBhjqGv-0Kelltu9wIkqo.*AAJTSQACMDIAAlNLABxTcTNwVEtxK29XRjlsbThQNzUwZVAzVVdGZEU9AAR0eXBlAANDVFMAAlMxAAIwMQ..*"}' "https://xlou.iam.xlou-cdm.engineeringpit.com/am/oauth2/authorize?client_id=smokeclient&scope=fr:idm:*&redirect_uri=https://fake.com&response_type=code&realm=/" [http_cmd]: http status code OK --- status code --- http status code is 302 (expected 302) --- http response --- {'Date': 'Sat, 13 May 2023 00:55:29 GMT', 'Content-Length': '0', 'Connection': 'keep-alive', 'X-Frame-Options': 'SAMEORIGIN', 'X-Content-Type-Options': 'nosniff', 'Cache-Control': 'no-store', 'Location': 'https://fake.com?code=OhhvP7kDKIFsJuLiGjknYMpIcTY&iss=https%3A%2F%2Fxlou.iam.xlou-cdm.engineeringpit.com%2Fam%2Foauth2&client_id=smokeclient', 'Pragma': 'no-cache', 'Set-Cookie': 'OAUTH_REQUEST_ATTRIBUTES=DELETED; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; Secure; HttpOnly; SameSite=none', 'Strict-Transport-Security': 'max-age=15724800; includeSubDomains', 'X-ForgeRock-TransactionId': '988ae35ffa3c9776aff90c21b3704a08'} Oauth2 exchange authorize code for access token [http_cmd]: curl -H "Content-Type: application/x-www-form-urlencoded" -L -X POST --data '{"grant_type": "authorization_code", "redirect_uri": "https://fake.com", "client_id": "smokeclient", "code": "OhhvP7kDKIFsJuLiGjknYMpIcTY"}' "https://xlou.iam.xlou-cdm.engineeringpit.com/am/oauth2/access_token?realm=/" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- { "access_token": "mZAzzbbLJaIg0qqOs24PBg1_0UE", "scope": "fr:idm:*", "token_type": "Bearer", "expires_in": 3599 } [http_cmd]: curl -H "Authorization: Bearer mZAzzbbLJaIg0qqOs24PBg1_0UE" -H "Content-Type: application/json" --insecure -L -X POST --data '{"userName": "SpiderMan_on_idm_20230513000815", "givenName": "Peter", "sn": "Parker", "password": "T35tr0ck123", "telephoneNumber": "6669876987", "description": "IDM Test User", "roles": [], "mail": "SpiderMan_on_idm_20230513000815@forgerock.com"}' "https://xlou.iam.xlou-cdm.engineeringpit.com/openidm/managed/user?_action=create" [http_cmd]: http status code OK --- status code --- http status code is 201 (expected [200, 201]) --- http response --- [print_head_tail]: Print head (10 lines) and tail (10 lines) of input string (33 lines): ----- output ----- { "_id": "c3dd5b31-83c2-4644-91fc-ff4097b9bae2", "_rev": "d8063be2-962a-4a67-b934-86bd364285f0-228", "country": null, "telephoneNumber": "6669876987", "mail": "SpiderMan_on_idm_20230513000815@forgerock.com", "memberOfOrgIDs": [], "city": null, "displayName": null, "assignedDashboard": [], [...] "effectiveGroups": [], "preferences": null, "organizationName": null, "givenName": "Peter", "stateProvince": null, "userName": "SpiderMan_on_idm_20230513000815", "postalAddress": null, "effectiveRoles": [], "activateAccount": null } ________________________________________________________________________________ [13/May/2023 00:55:31] Validation_user_idm step2 : Make sure we can search the user both in IDM ________________________________________________________________________________ Create new LoginSession for user "SpiderMan_on_idm_20230513000815" [LoginSession] Get "access_token" token for user "SpiderMan_on_idm_20230513000815" [LoginSession] Obtaining new "access_token" token from server because it was not obtained yet for the user [LoginSession] Get "token_id" token for user "SpiderMan_on_idm_20230513000815" [LoginSession] Obtaining new "token_id" token from server because it was not obtained yet for the user Authenticate user SpiderMan_on_idm_20230513000815 via REST [http_cmd]: curl -H "X-OpenAM-Username: SpiderMan_on_idm_20230513000815" -H "X-OpenAM-Password: T35tr0ck123" -H "Content-Type: application/json" -H "Accept-API-Version: resource=2.0, protocol=1.0" -L -X POST "https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/authenticate?realm=/" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- { "tokenId": "HIe546dfg3LqAVBSxQMX3lHfdIw.*AAJTSQACMDIAAlNLABxtNzkvUjBhK29CRXJwNUN0SzIwekU5aXpHRjQ9AAR0eXBlAANDVFMAAlMxAAIwMQ..*", "successUrl": "/am/console", "realm": "/" } [LoginSession] Obtaining session info [http_cmd]: curl -H "iPlanetDirectoryPro: HIe546dfg3LqAVBSxQMX3lHfdIw.*AAJTSQACMDIAAlNLABxtNzkvUjBhK29CRXJwNUN0SzIwekU5aXpHRjQ9AAR0eXBlAANDVFMAAlMxAAIwMQ..*" -H "Content-Type: application/json" -H "Accept-API-Version: resource=3.0, protocol=2.1" -H "filters_cookie: HIe546dfg3LqAVBSxQMX3lHfdIw.*AAJTSQACMDIAAlNLABxtNzkvUjBhK29CRXJwNUN0SzIwekU5aXpHRjQ9AAR0eXBlAANDVFMAAlMxAAIwMQ..*" -L -X POST "https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/realms/root/sessions?_action=getSessionInfo" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- { "username": "c3dd5b31-83c2-4644-91fc-ff4097b9bae2", "universalId": "id=c3dd5b31-83c2-4644-91fc-ff4097b9bae2,ou=user,ou=am-config", "realm": "/", "latestAccessTime": "2023-05-13T00:55:31Z", "maxIdleExpirationTime": "2023-05-13T01:25:31Z", "maxSessionExpirationTime": "2023-05-13T02:55:30Z", "properties": { "AMCtxId": "297af14a-c567-4379-af36-36eacbbc6b94-543" } } Obtain Oauth2 authz code via REST Oauth2 authorize for access token [http_cmd]: curl -H "Content-Type: application/x-www-form-urlencoded" -X POST --cookie "amlbcookie=01" --cookie "iPlanetDirectoryPro=HIe546dfg3LqAVBSxQMX3lHfdIw.*AAJTSQACMDIAAlNLABxtNzkvUjBhK29CRXJwNUN0SzIwekU5aXpHRjQ9AAR0eXBlAANDVFMAAlMxAAIwMQ..*" --cookie "route=1683939332.409.19177.391793|f60edb382037eb2df1e800d563ad78a7" --data '{"decision": "Allow", "csrf": "HIe546dfg3LqAVBSxQMX3lHfdIw.*AAJTSQACMDIAAlNLABxtNzkvUjBhK29CRXJwNUN0SzIwekU5aXpHRjQ9AAR0eXBlAANDVFMAAlMxAAIwMQ..*"}' "https://xlou.iam.xlou-cdm.engineeringpit.com/am/oauth2/authorize?client_id=smokeclient&scope=fr:idm:*&redirect_uri=https://fake.com&response_type=code&realm=/" [http_cmd]: http status code OK --- status code --- http status code is 302 (expected 302) --- http response --- {'Date': 'Sat, 13 May 2023 00:55:31 GMT', 'Content-Length': '0', 'Connection': 'keep-alive', 'X-Frame-Options': 'SAMEORIGIN', 'X-Content-Type-Options': 'nosniff', 'Cache-Control': 'no-store', 'Location': 'https://fake.com?code=GFDMRg1F7FlQ3s-9ym8QqX6Dl8o&iss=https%3A%2F%2Fxlou.iam.xlou-cdm.engineeringpit.com%2Fam%2Foauth2&client_id=smokeclient', 'Pragma': 'no-cache', 'Set-Cookie': 'OAUTH_REQUEST_ATTRIBUTES=DELETED; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; Secure; HttpOnly; SameSite=none', 'Strict-Transport-Security': 'max-age=15724800; includeSubDomains', 'X-ForgeRock-TransactionId': 'de101c6a3ba0553bb093cde6c6633c7e'} Oauth2 exchange authorize code for access token [http_cmd]: curl -H "Content-Type: application/x-www-form-urlencoded" -L -X POST --data '{"grant_type": "authorization_code", "redirect_uri": "https://fake.com", "client_id": "smokeclient", "code": "GFDMRg1F7FlQ3s-9ym8QqX6Dl8o"}' "https://xlou.iam.xlou-cdm.engineeringpit.com/am/oauth2/access_token?realm=/" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- { "access_token": "qp_PTegS3hz3p5rdLNkSSTz5PZQ", "scope": "fr:idm:*", "token_type": "Bearer", "expires_in": 3599 } [http_cmd]: curl -H "Authorization: Bearer qp_PTegS3hz3p5rdLNkSSTz5PZQ" -H "Content-Type: application/json" --insecure -L -X GET "https://xlou.iam.xlou-cdm.engineeringpit.com/openidm/managed/user/c3dd5b31-83c2-4644-91fc-ff4097b9bae2" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- [print_head_tail]: Print head (10 lines) and tail (10 lines) of input string (33 lines): ----- output ----- { "_id": "c3dd5b31-83c2-4644-91fc-ff4097b9bae2", "_rev": "d8063be2-962a-4a67-b934-86bd364285f0-228", "country": null, "telephoneNumber": "6669876987", "mail": "SpiderMan_on_idm_20230513000815@forgerock.com", "memberOfOrgIDs": [], "city": null, "displayName": null, "assignedDashboard": [], [...] "effectiveGroups": [], "preferences": null, "organizationName": null, "givenName": "Peter", "stateProvince": null, "userName": "SpiderMan_on_idm_20230513000815", "postalAddress": null, "effectiveRoles": [], "activateAccount": null } ________________________________________________________________________________ [13/May/2023 00:55:32] Validation_user_idm step3 : Make sure user can authenticate himself ________________________________________________________________________________ Anonymous POST to Login service endpoint to obtain appropriate callbacks Call to Login Tree [http_cmd]: curl -H "Content-Type: application/json" -H "Accept-API-Version: protocol=2.0,resource=1.0" -L -X POST "https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/realms/root/authenticate?authIndexType=service&authIndexValue=Login" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- [print_head_tail]: Print head (10 lines) and tail (10 lines) of input string (39 lines): ----- output ----- { "authId": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.h4Z_scVagm0bCMBewRxrs5AwS-sDuEnLsa8ew_W4gNk", "callbacks": [ { "type": "NameCallback", "output": [ { "name": "prompt", "value": "User Name" } [...] "name": "IDToken2", "value": "" } ], "_id": 1 } ], "header": "Sign In", "description": "New here? Create an account
Forgot username? Forgot password?" } Set value for first two callbacks for login Call to Login Tree with input values [http_cmd]: curl -H "Content-Type: application/json" -H "Accept-API-Version: protocol=2.0,resource=1.0" -L -X POST --data '{"authId": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.h4Z_scVagm0bCMBewRxrs5AwS-sDuEnLsa8ew_W4gNk", "callbacks": [{"type": "NameCallback", "output": [{"name": "prompt", "value": "User Name"}], "input": [{"name": "IDToken1", "value": "SpiderMan_on_idm_20230513000815"}], "_id": 0}, {"type": "PasswordCallback", "output": [{"name": "prompt", "value": "Password"}], "input": [{"name": "IDToken2", "value": "T35tr0ck123"}], "_id": 1}], "header": "Sign In", "description": "New here? Create an account
Forgot username? Forgot password?"}' "https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/realms/root/authenticate?authIndexType=service&authIndexValue=Login" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- { "tokenId": "WOdtUoIlMOq1hU7Wi7D9rNXTEW8.*AAJTSQACMDIAAlNLABxDMWxmUHdPZ2hIUFBjN21KWUpnWG8yWDRNNFk9AAR0eXBlAANDVFMAAlMxAAIwMQ..*", "successUrl": "/am/console", "realm": "/" } ________________________________________________________________________________ [13/May/2023 00:55:34] Validation_user_idm step4 : Make sure we can delete the user ________________________________________________________________________________ [LoginSession] Get "access_token" token for user "amadmin" [LoginSession] re-using "access_token" token that remains valid for 59m 46s [http_cmd]: curl -H "Authorization: Bearer mZAzzbbLJaIg0qqOs24PBg1_0UE" -H "Content-Type: application/json" --insecure -L -X DELETE "https://xlou.iam.xlou-cdm.engineeringpit.com/openidm/managed/user/c3dd5b31-83c2-4644-91fc-ff4097b9bae2" [http_cmd]: http status code OK --- status code --- http status code is 200 (expected 200) --- http response --- [print_head_tail]: Print head (10 lines) and tail (10 lines) of input string (33 lines): ----- output ----- { "_id": "c3dd5b31-83c2-4644-91fc-ff4097b9bae2", "_rev": "d8063be2-962a-4a67-b934-86bd364285f0-228", "country": null, "telephoneNumber": "6669876987", "mail": "SpiderMan_on_idm_20230513000815@forgerock.com", "memberOfOrgIDs": [], "city": null, "displayName": null, "assignedDashboard": [], [...] "effectiveGroups": [], "preferences": null, "organizationName": null, "givenName": "Peter", "stateProvince": null, "userName": "SpiderMan_on_idm_20230513000815", "postalAddress": null, "effectiveRoles": [], "activateAccount": null } ________________________________________________________________________________ [13/May/2023 00:55:34] Validation_user_idm post : Post method ________________________________________________________________________________ Setting result to PASS Task has been successfully stopped