From c65425e6a34086c535cd8eca3e1e94e47c466f76 Mon Sep 17 00:00:00 2001
From: Guilherme Cassolato <guicassolato@gmail.com>
Date: Mon, 2 Oct 2023 20:48:51 +0200
Subject: [PATCH] tests: unit tests from AuthConfig conditions from
 HTTPRouteRules and hostnames

---
 .../authpolicy_istio_auth_config_test.go      | 743 ++++++++++++++++++
 1 file changed, 743 insertions(+)
 create mode 100644 controllers/authpolicy_istio_auth_config_test.go

diff --git a/controllers/authpolicy_istio_auth_config_test.go b/controllers/authpolicy_istio_auth_config_test.go
new file mode 100644
index 000000000..d0ae64b91
--- /dev/null
+++ b/controllers/authpolicy_istio_auth_config_test.go
@@ -0,0 +1,743 @@
+//go:build unit
+
+package controllers
+
+import (
+	"reflect"
+	"testing"
+
+	authorinoapi "github.com/kuadrant/authorino/api/v1beta2"
+	"k8s.io/utils/ptr"
+	gatewayapiv1beta1 "sigs.k8s.io/gateway-api/apis/v1beta1"
+)
+
+func TestAuthorinoConditionsFromHTTPRouteRule(t *testing.T) {
+	testCases := []struct {
+		name      string
+		hostnames []gatewayapiv1beta1.Hostname
+		rule      gatewayapiv1beta1.HTTPRouteRule
+		expected  []authorinoapi.PatternExpressionOrRef
+	}{
+		{
+			name:      "No HTTPRouteMatch",
+			hostnames: []gatewayapiv1beta1.Hostname{"toystore.kuadrant.io"},
+			rule:      gatewayapiv1beta1.HTTPRouteRule{},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					PatternExpression: authorinoapi.PatternExpression{
+						Selector: "context.request.http.host",
+						Operator: "matches",
+						Value:    `toystore\.kuadrant\.io`,
+					},
+				},
+			},
+		},
+		{
+			name:      "Single HTTPRouteMatch",
+			hostnames: []gatewayapiv1beta1.Hostname{"toystore.kuadrant.io"},
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("PathPrefix")),
+							Value: ptr.To("/toy"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: "context.request.http.host",
+												Operator: "matches",
+												Value:    `toystore\.kuadrant\.io`,
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    `/toy.*`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name:      "Multiple HTTPRouteMatches",
+			hostnames: []gatewayapiv1beta1.Hostname{"toystore.kuadrant.io"},
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("PathPrefix")),
+							Value: ptr.To("/toy"),
+						},
+					},
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("Exact")),
+							Value: ptr.To("/foo"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: "context.request.http.host",
+												Operator: "matches",
+												Value:    `toystore\.kuadrant\.io`,
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    `/toy.*`,
+											},
+										},
+									},
+								},
+							},
+						},
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: "context.request.http.host",
+												Operator: "matches",
+												Value:    `toystore\.kuadrant\.io`,
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "eq",
+												Value:    `/foo`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name:      "Multiple hosts",
+			hostnames: []gatewayapiv1beta1.Hostname{"toystore.kuadrant.io", "gamestore.kuadrant.io"},
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("PathPrefix")),
+							Value: ptr.To("/toy"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: "context.request.http.host",
+												Operator: "matches",
+												Value:    `toystore\.kuadrant\.io|gamestore\.kuadrant\.io`,
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    `/toy.*`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name:      "Host wildcard",
+			hostnames: []gatewayapiv1beta1.Hostname{"*.kuadrant.io"},
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("PathPrefix")),
+							Value: ptr.To("/toy"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: "context.request.http.host",
+												Operator: "matches",
+												Value:    `.*\.kuadrant\.io`,
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    `/toy.*`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name:      "Catch-all host is ignored",
+			hostnames: []gatewayapiv1beta1.Hostname{"toystore.kuadrant.io", "*"},
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("PathPrefix")),
+							Value: ptr.To("/toy"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: "context.request.http.host",
+												Operator: "matches",
+												Value:    `toystore\.kuadrant\.io`,
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    `/toy.*`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "Method",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Method: ptr.To(gatewayapiv1beta1.HTTPMethod("GET")),
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.method`,
+												Operator: "eq",
+												Value:    `GET`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "PathMatchExact",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("Exact")),
+							Value: ptr.To("/toy"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "eq",
+												Value:    `/toy`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "PathMatchPrefix",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("PathPrefix")),
+							Value: ptr.To("/toy"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    `/toy.*`,
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "PathMatchRegularExpression",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Path: &gatewayapiv1beta1.HTTPPathMatch{
+							Type:  ptr.To(gatewayapiv1beta1.PathMatchType("RegularExpression")),
+							Value: ptr.To("^/(dolls|cars)"),
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.path.@extract:{"sep":"?"}`,
+												Operator: "matches",
+												Value:    "^/(dolls|cars)",
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "Single header match",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Headers: []gatewayapiv1beta1.HTTPHeaderMatch{
+							{
+								Type:  ptr.To(gatewayapiv1beta1.HeaderMatchType("Exact")),
+								Name:  "X-Foo",
+								Value: "a-value",
+							},
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.headers.x-foo`,
+												Operator: "eq",
+												Value:    "a-value",
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "Multiple header matches",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Headers: []gatewayapiv1beta1.HTTPHeaderMatch{
+							{
+								Type:  ptr.To(gatewayapiv1beta1.HeaderMatchType("Exact")),
+								Name:  "x-foo",
+								Value: "a-value",
+							},
+							{
+								Type:  ptr.To(gatewayapiv1beta1.HeaderMatchType("Exact")),
+								Name:  "x-bar",
+								Value: "other-value",
+							},
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.headers.x-foo`,
+												Operator: "eq",
+												Value:    "a-value",
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.headers.x-bar`,
+												Operator: "eq",
+												Value:    "other-value",
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "HeaderMatchRegularExpression",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						Headers: []gatewayapiv1beta1.HTTPHeaderMatch{
+							{
+								Type:  ptr.To(gatewayapiv1beta1.HeaderMatchType("RegularExpression")),
+								Name:  "x-foo",
+								Value: "^a+.*$",
+							},
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											PatternExpression: authorinoapi.PatternExpression{
+												Selector: `context.request.http.headers.x-foo`,
+												Operator: "matches",
+												Value:    "^a+.*$",
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "Single query param match",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						QueryParams: []gatewayapiv1beta1.HTTPQueryParamMatch{
+							{
+								Type:  ptr.To(gatewayapiv1beta1.QueryParamMatchType("Exact")),
+								Name:  "x-foo",
+								Value: "a-value",
+							},
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"?x-foo=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "eq",
+															Value:    "a-value",
+														},
+													},
+												},
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"&x-foo=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "eq",
+															Value:    "a-value",
+														},
+													},
+												},
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "Multiple query param matches",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						QueryParams: []gatewayapiv1beta1.HTTPQueryParamMatch{
+							{
+								Type:  ptr.To(gatewayapiv1beta1.QueryParamMatchType("Exact")),
+								Name:  "x-foo",
+								Value: "a-value",
+							},
+							{
+								Type:  ptr.To(gatewayapiv1beta1.QueryParamMatchType("Exact")),
+								Name:  "x-bar",
+								Value: "other-value",
+							},
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"?x-foo=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "eq",
+															Value:    "a-value",
+														},
+													},
+												},
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"&x-foo=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "eq",
+															Value:    "a-value",
+														},
+													},
+												},
+											},
+										},
+									},
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"?x-bar=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "eq",
+															Value:    "other-value",
+														},
+													},
+												},
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"&x-bar=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "eq",
+															Value:    "other-value",
+														},
+													},
+												},
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "QueryParamMatchRegularExpression",
+			rule: gatewayapiv1beta1.HTTPRouteRule{
+				Matches: []gatewayapiv1beta1.HTTPRouteMatch{
+					{
+						QueryParams: []gatewayapiv1beta1.HTTPQueryParamMatch{
+							{
+								Type:  ptr.To(gatewayapiv1beta1.QueryParamMatchType("RegularExpression")),
+								Name:  "x-foo",
+								Value: "^a+.*$",
+							},
+						},
+					},
+				},
+			},
+			expected: []authorinoapi.PatternExpressionOrRef{
+				{
+					Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+						{
+							PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+								All: []authorinoapi.UnstructuredPatternExpressionOrRef{
+									{
+										PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+											Any: []authorinoapi.UnstructuredPatternExpressionOrRef{
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"?x-foo=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "matches",
+															Value:    "^a+.*$",
+														},
+													},
+												},
+												{
+													PatternExpressionOrRef: authorinoapi.PatternExpressionOrRef{
+														PatternExpression: authorinoapi.PatternExpression{
+															Selector: `context.request.http.path.@extract:{"sep":"&x-foo=","pos":1}.@extract:{"sep":"&"}`,
+															Operator: "matches",
+															Value:    "^a+.*$",
+														},
+													},
+												},
+											},
+										},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+	}
+
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			result := authorinoConditionsFromHTTPRouteRule(tc.rule, tc.hostnames)
+			if len(result) != len(tc.expected) {
+				t.Errorf("Expected %d rule, got %d", len(tc.expected), len(result))
+			}
+			for i := range result {
+				if !reflect.DeepEqual(result[i], tc.expected[i]) {
+					t.Errorf("Expected rule %d to be %v, got %v", i, tc.expected[i], result[i])
+				}
+			}
+		})
+	}
+}