package link

import (
	"testing"

	"github.com/novox/mesh-controller/internal/broker"
)

// The provisioner client is granted the vault's secret-changed at the address the vault's event lands on, so it
// hears a rotation (design 57 V4): the grant's subject and the event's are one.
func TestTheClientsGrantIsWhereTheVaultsSecretChangedLands(t *testing.T) {
	if got := EventSubject("mesh-vault", "secret-changed"); got != broker.VaultSecretChangedSubject {
		t.Errorf("the vault's secret-changed lands on %s, and the client is granted %s", got,
			broker.VaultSecretChangedSubject)
	}
}