test/suites: Test the token pruning task removes expired pending TLS …

…identities.

Signed-off-by: Mark Laing <[email protected]>

test/suites/auth.sh

@@ -102,6 +102,13 @@ test_authorization() {
   # The token was used, so the pending identity should be deleted.
   [ "$(lxc auth identity list --format csv | grep -cF 'pending')" = 0 ]
 
+  # Check token prune task works
+  lxc auth identity create tls/test-user2 --quiet
+  [ "$(lxc auth identity list --format csv | grep -cF 'pending')" = 1 ]
+  sleep 2 # Wait for token to expire (expiry is still set to 1 second)
+  lxc query --request POST /internal/testing/prune-tokens
+  [ "$(lxc auth identity list --format csv | grep -cF 'pending')" = 0 ]
+
   # Check users have been added to the group.
   tls_identity_fingerprint="$(cert_fingerprint "${LXD_CONF2}/client.crt")"
   lxc auth identity list --format csv | grep -Fq 'oidc,OIDC client," ",[email protected],test-group'