feat: support multi-geo for Konnect

CHANGELOG.md

@@ -49,6 +49,8 @@
 
 ### Added
 
+- Add support to multi-geo for Konnect.
+  [#732](https://github.com/Kong/deck/pull/732)
 - Support PAT (Personal Access Tokens) for Konnect authentication.
   [#710](https://github.com/Kong/deck/pull/710)
 

konnect/login_service.go

@@ -1,12 +1,14 @@
 package konnect
 
 import (
+	"bytes"
 	"context"
+	"encoding/json"
 	"errors"
-	"fmt"
 	"net/http"
 	"net/http/cookiejar"
 	"net/url"
+	"strings"
 )
 
 type user struct {
@@ -54,17 +56,41 @@ func (s *AuthService) Login(ctx context.Context, email,
 	return authResponse, nil
 }
 
+// getGlobalAuthEndpoint returns the global auth endpoint
+// given a base Konnect URL.
+func getGlobalAuthEndpoint(baseURL string) string {
+	parts := strings.Split(baseURL, "api.konghq")
+	return baseEndpointUS + parts[len(parts)-1] + authEndpointV2
+}
+
+func createAuthRequest(baseURL, email, password string) (*http.Request, error) {
+	var (
+		buf []byte
+		err error
+
+		body = map[string]string{
+			"username": email,
+			"password": password,
+		}
+	)
+
+	buf, err = json.Marshal(body)
+	if err != nil {
+		return nil, err
+	}
+
+	endpoint := getGlobalAuthEndpoint(baseURL)
+	return http.NewRequest(http.MethodPost, endpoint, bytes.NewBuffer(buf))
+}
+
 func (s *AuthService) sessionAuth(ctx context.Context, email,
 	password string,
 ) (AuthResponse, error) {
-	body := map[string]string{
-		"username": email,
-		"password": password,
-	}
-	req, err := s.client.NewRequest(http.MethodPost, authEndpointV2, nil, body)
+	req, err := createAuthRequest(s.client.baseURL, email, password)
 	if err != nil {
-		return AuthResponse{}, fmt.Errorf("build http request: %v", err)
+		return AuthResponse{}, err
 	}
+
 	var authResponse AuthResponse
 	resp, err := s.client.Do(ctx, req, &authResponse)
 	if err != nil {

konnect/login_service_test.go

@@ -0,0 +1,38 @@
+package konnect
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestGetGlobalAuthEndpoint(t *testing.T) {
+	tests := []struct {
+		baseURL  string
+		expected string
+	}{
+		{
+			baseURL:  "https://us.api.konghq.com",
+			expected: "https://global.api.konghq.com/kauth/api/v1/authenticate",
+		},
+		{
+			baseURL:  "https://global.api.konghq.com",
+			expected: "https://global.api.konghq.com/kauth/api/v1/authenticate",
+		},
+		{
+			baseURL:  "https://eu.api.konghq.com",
+			expected: "https://global.api.konghq.com/kauth/api/v1/authenticate",
+		},
+		{
+			baseURL:  "https://api.konghq.com",
+			expected: "https://global.api.konghq.com/kauth/api/v1/authenticate",
+		},
+		{
+			baseURL:  "https://eu.api.konghq.test",
+			expected: "https://global.api.konghq.test/kauth/api/v1/authenticate",
+		},
+	}
+	for _, tt := range tests {
+		assert.Equal(t, tt.expected, getGlobalAuthEndpoint(tt.baseURL))
+	}
+}

konnect/types.go

@@ -5,6 +5,7 @@ import (
 )
 
 const (
+	baseEndpointUS = "https://global.api.konghq"
 	authEndpoint   = "/api/auth"
 	authEndpointV2 = "/kauth/api/v1/authenticate"
 )