SNOW-3677756: Add e2e test for GetWebIdentityToken opt-in WIF path (#2677)

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: sfc-gh-dheyman

ci/wif/aws-lambda/test.sh

@@ -24,7 +24,7 @@ run_aws_function() {
   local aws_version
   aws_version=$(aws --version 2>&1 | head -n1)
 
-  local payload_json="{\"queryStringParameters\":{\"SNOWFLAKE_TEST_WIF_HOST\":\"${SNOWFLAKE_TEST_WIF_HOST_AWS}\",\"SNOWFLAKE_TEST_WIF_ACCOUNT\":\"${SNOWFLAKE_TEST_WIF_ACCOUNT}\",\"SNOWFLAKE_TEST_WIF_PROVIDER\":\"AWS\",\"BRANCH\":\"${BRANCH}\"}}"
+  local payload_json="{\"queryStringParameters\":{\"SNOWFLAKE_TEST_WIF_HOST\":\"${SNOWFLAKE_TEST_WIF_HOST_AWS}\",\"SNOWFLAKE_TEST_WIF_ACCOUNT\":\"${SNOWFLAKE_TEST_WIF_ACCOUNT}\",\"SNOWFLAKE_TEST_WIF_PROVIDER\":\"AWS\",\"BRANCH\":\"${BRANCH}\",\"SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_IMPERSONATION_PATH\":\"${SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_IMPERSONATION_PATH:-}\",\"SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_USER\":\"${SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_USER:-}\"}}"
   local function_name="drivers-wif-automated-tests"
 
   local cli_response_file="/tmp/aws_cli_response_$$.json"

ci/wif/shared/com/snowflake/wif/common/WifTestHelper.java

@@ -144,6 +144,15 @@ public static int executeMavenBuild(String repoFolderPath, String tempDirectory,
                 pb.environment().put("SNOWFLAKE_TEST_WIF_AWS_EXTERNAL_ID", externalId);
             }
 
+            String outboundTokenImpersonationPath = queryParams.get("SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_IMPERSONATION_PATH");
+            if (outboundTokenImpersonationPath != null) {
+                pb.environment().put("SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_IMPERSONATION_PATH", outboundTokenImpersonationPath);
+            }
+            String outboundTokenUser = queryParams.get("SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_USER");
+            if (outboundTokenUser != null) {
+                pb.environment().put("SNOWFLAKE_TEST_WIF_OUTBOUND_TOKEN_USER", outboundTokenUser);
+            }
+
             process = pb.start();
 
             final InputStream processInputStream = process.getInputStream();

src/test/java/net/snowflake/client/wif/WIFLatestIT.java

@@ -45,6 +45,9 @@ public class WIFLatestIT {
       System.getenv("SNOWFLAKE_TEST_WIF_IMPERSONATION_ROLE_ARN_WITH_EXTERNAL_ID");
   private static final String IMPERSONATION_USER_WITH_EXTERNAL_ID =
       System.getenv("SNOWFLAKE_TEST_WIF_IMPERSONATION_USER_WITH_EXTERNAL_ID");
+  private static final String OUTBOUND_TOKEN_IMPERSONATION_PATH =
+      "arn:aws:iam::376129840140:role/drivers-wif-automated-tests-with-issuer";
+  private static final String OUTBOUND_TOKEN_USER = "TEST_WIF_E2E_AWS_WITH_ISSUER";
 
   @Test
   void shouldAuthenticateUsingWIFWithDefinedProvider() {
@@ -145,6 +148,18 @@ private void connectAndExecuteSimpleQuery(Properties props, String expectedUser)
     }
   }
 
+  @Test
+  @EnabledIf("isProviderAWS")
+  void shouldAuthenticateUsingWIFWithGetWebIdentityToken() {
+    Properties properties = new Properties();
+    properties.put("account", ACCOUNT);
+    properties.put("authenticator", "WORKLOAD_IDENTITY");
+    properties.put("workloadIdentityProvider", "AWS");
+    properties.put("workloadIdentityAwsUseOutboundToken", "true");
+    properties.put("workloadIdentityImpersonationPath", OUTBOUND_TOKEN_IMPERSONATION_PATH);
+    connectAndExecuteSimpleQuery(properties, OUTBOUND_TOKEN_USER);
+  }
+
   @Test
   @EnabledIf("isProviderAWS")
   @EnabledIfEnvironmentVariable(