EAB tests

backend/bdd/features/pki/acme/account.feature

@@ -5,3 +5,9 @@ Feature: Account
     When I have an ACME client connecting to {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/directory
     Then I register a new ACME account with email fangpen@infisical.com and EAB key id "{acme_profile.eab_kid}" with secret "{acme_profile.eab_secret}" as acme_account
     Then the value acme_account.uri with jq "." should match pattern {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/accounts/(.+)
+
+  Scenario: Create a new account without EAB
+    Given I have an ACME cert profile as "acme_profile"
+    When I have an ACME client connecting to {BASE_URL}/api/v1/pki/acme/profiles/{acme_profile.id}/directory
+    Then I register a new ACME account with email fangpen@infisical.com without EAB
+    Then the value error with jq ".type" should be equal to "urn:ietf:params:acme:error:externalAccountRequired"

backend/bdd/features/steps/pki_acme.py

@@ -252,6 +252,18 @@ def step_impl(context: Context, email: str, kid: str, secret: str, account_var:
     context.vars[account_var] = acme_client.new_account(registration)
 
 
+@then("I register a new ACME account with email {email} without EAB")
+def step_impl(context: Context, email: str):
+    acme_client = context.acme_client
+    registration = messages.NewRegistration.from_data(
+        email=email,
+    )
+    try:
+        acme_client.new_account(registration)
+    except Exception as exp:
+        context.vars["error"] = exp
+
+
 def send_raw_acme_req(context: Context, url: str):
     acme_client = context.acme_client
     content = json.loads(context.text)