Enterprise rbac testing (#3653)

* WIP refactor Auth tests to allow enterprise

Signed-off-by: Spike Curtis <spike@coder.com>

* enterprise RBAC testing

Signed-off-by: Spike Curtis <spike@coder.com>

* Fix import ordering

Signed-off-by: Spike Curtis <spike@coder.com>

Signed-off-by: Spike Curtis <spike@coder.com>

enterprise/coderd/auth_test.go

@@ -0,0 +1,25 @@
+package coderd_test
+
+import (
+	"context"
+	"testing"
+
+	"github.com/coder/coder/coderd/coderdtest"
+	"github.com/coder/coder/coderd/rbac"
+	"github.com/coder/coder/enterprise/coderd"
+	"github.com/coder/coder/testutil"
+)
+
+// TestAuthorizeAllEndpoints will check `authorize` is called on every endpoint registered.
+func TestAuthorizeAllEndpoints(t *testing.T) {
+	t.Parallel()
+	ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
+	defer cancel()
+	a := coderdtest.NewAuthTester(ctx, t, &coderdtest.Options{APIBuilder: coderd.NewEnterprise})
+	skipRoutes, assertRoute := coderdtest.AGPLRoutes(a)
+	assertRoute["POST:/api/v2/licenses"] = coderdtest.RouteCheck{
+		AssertAction: rbac.ActionCreate,
+		AssertObject: rbac.ResourceLicense,
+	}
+	a.Test(ctx, assertRoute, skipRoutes)
+}

enterprise/coderd/licenses.go

@@ -12,12 +12,10 @@ import (
 	"strings"
 	"time"
 
-	"golang.org/x/xerrors"
-
+	"cdr.dev/slog"
 	"github.com/go-chi/chi/v5"
 	"github.com/golang-jwt/jwt/v4"
-
-	"cdr.dev/slog"
+	"golang.org/x/xerrors"
 
 	"github.com/coder/coder/coderd"
 	"github.com/coder/coder/coderd/database"