test/suites: Test that expired pending TLS identities are pruned.

Signed-off-by: Mark Laing <[email protected]>

test/suites/auth.sh

@@ -99,6 +99,11 @@ test_authorization() {
   LXD_CONF="${LXD_CONF3}" gen_cert_and_key "client"
   ! LXD_CONF="${LXD_CONF3}" lxc remote add tls "${tls_identity_token2}" || false
 
+  # Check token prune task works
+  [ "$(lxc auth identity list --format csv | grep -cF 'pending')" = 1 ]
+  lxc query --request POST /internal/testing/prune-tokens
+  [ "$(lxc auth identity list --format csv | grep -cF 'pending')" = 0 ]
+
   # Check users have been added to the group.
   tls_identity_fingerprint="$(cert_fingerprint "${LXD_CONF2}/client.crt")"
   lxc auth identity list --format csv | grep -Fq 'oidc,OIDC client," ",[email protected],test-group'