We prefer integration tests as you
usually need more things to have available. For example for
federation, you need realm and user DB and you need to have realm
configured with federationProvider. There is not much you can test
within single module, so we have just very simple tests in
individual modules (like LDAPDnTest or PasswordPolicyTest), but
most of the stuff is tested in testsuite. For KEYCLOAK-1797 I
prefer to take a look at LDAPRoleMappingsTest
and possibly add new test methods here.
Btv. what's your plan for KEYCLOAK-1797 ? And in your LDAP
environment, is it often that new role is added as member to
some other roles? I wonder if we need to always do "deep" search
in runtime, or if we can instead do it just at some point and
rely on Keycloak composite roles . If you always need deep
search and do something based on it, it will be good to have a
flag in configuration, which will allow to disable it (for
performance reasons).
Marek
On 26/10/15 08:55, Andrzej Goławski wrote:
Hi Marek,
Thanks for reply!
I saw those test, but personally I prefer unit tests over
integrated tests:)
Best Regards,
Andrzej