From 051e65f2459160060f7871da3067c155ad7958a5 Mon Sep 17 00:00:00 2001
From: "alekh.raj" <alekh.raj@flipkart.com>
Date: Mon, 26 Dec 2022 18:34:52 +0530
Subject: [PATCH] testing cache refresh on policy manager

Signed-off-by: Alekh Raj alekh.raj@flipkart.com
---
 sdk/helper/keysutil/policy_test.go | 70 ++++++++++++++++++++++++++++++
 1 file changed, 70 insertions(+)

diff --git a/sdk/helper/keysutil/policy_test.go b/sdk/helper/keysutil/policy_test.go
index f5e4d35eb81c..dcc81d4c5956 100644
--- a/sdk/helper/keysutil/policy_test.go
+++ b/sdk/helper/keysutil/policy_test.go
@@ -1067,3 +1067,73 @@ func isUnsupportedGoHashType(hashType HashType, err error) bool {
 
 	return false
 }
+
+func Test_KeyRefresh(t *testing.T) {
+	ctx := context.Background()
+	storage := &logical.InmemStorage{}
+	lockManagerWithCache, _ := NewLockManager(true, 0)
+
+	// create a new policy
+	p, upserted, err := lockManagerWithCache.GetPolicy(ctx, PolicyRequest{
+		Upsert:  true,
+		Storage: storage,
+		KeyType: KeyType_AES256_GCM96,
+		Name:    "test",
+	}, rand.Reader)
+
+	if err != nil {
+		t.Fatal(err)
+	}
+	if p == nil {
+		t.Fatal("nil policy")
+	}
+	if !upserted {
+		t.Fatal("expected an upsert")
+	}
+
+	// re-access a new policy
+	p, upserted, err = lockManagerWithCache.GetPolicy(ctx, PolicyRequest{
+		Upsert:  true,
+		Storage: storage,
+		KeyType: KeyType_AES256_GCM96,
+		Name:    "test",
+	}, rand.Reader)
+
+	if upserted {
+		t.Fatal("should not be upsert")
+	}
+
+	// clean up backend storage
+	storage = &logical.InmemStorage{}
+
+	// read should return true
+	p, upserted, err = lockManagerWithCache.GetPolicy(ctx, PolicyRequest{
+		Upsert:  true,
+		Storage: storage,
+		KeyType: KeyType_AES256_GCM96,
+		Name:    "test",
+	}, rand.Reader)
+
+	if upserted {
+		t.Fatal("should not be upsert")
+	}
+
+	// refresh cache
+	ctx = CacheRefreshContext(ctx, true)
+
+	// read should re-create the key
+	p, upserted, err = lockManagerWithCache.GetPolicy(ctx, PolicyRequest{
+		Upsert:  true,
+		Storage: storage,
+		KeyType: KeyType_AES256_GCM96,
+		Name:    "test",
+	}, rand.Reader)
+
+	if !upserted {
+		t.Fatal("should be upsert")
+	}
+
+	if !lockManagerWithCache.useCache {
+		p.Unlock()
+	}
+}