feat: trino support server-cert (#16346)

Signed-off-by: Đặng Minh Dũng <dungdm93@live.com>

tests/integration_tests/db_engine_specs/trino_tests.py

@@ -14,6 +14,9 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
+import json
+from unittest.mock import Mock, patch
+
 from sqlalchemy.engine.url import URL
 
 from superset.db_engine_specs.trino import TrinoEngineSpec
@@ -52,3 +55,35 @@ class TestTrinoDbEngineSpec(TestDbEngineSpec):
         url.database = "hive/default"
         TrinoEngineSpec.adjust_database_uri(url, selected_schema=None)
         self.assertEqual(url.database, "hive/default")
+
+    def test_get_extra_params(self):
+        database = Mock()
+
+        database.extra = json.dumps({})
+        database.server_cert = None
+        extra = TrinoEngineSpec.get_extra_params(database)
+        expected = {"engine_params": {"connect_args": {}}}
+        self.assertEqual(extra, expected)
+
+        expected = {
+            "first": 1,
+            "engine_params": {"second": "two", "connect_args": {"third": "three"}},
+        }
+        database.extra = json.dumps(expected)
+        database.server_cert = None
+        extra = TrinoEngineSpec.get_extra_params(database)
+        self.assertEqual(extra, expected)
+
+    @patch("superset.utils.core.create_ssl_cert_file")
+    def test_get_extra_params_with_server_cert(self, create_ssl_cert_file_func: Mock):
+        database = Mock()
+
+        database.extra = json.dumps({})
+        database.server_cert = "TEST_CERT"
+        create_ssl_cert_file_func.return_value = "/path/to/tls.crt"
+        extra = TrinoEngineSpec.get_extra_params(database)
+
+        connect_args = extra.get("engine_params", {}).get("connect_args", {})
+        self.assertEqual(connect_args.get("http_scheme"), "https")
+        self.assertEqual(connect_args.get("verify"), "/path/to/tls.crt")
+        create_ssl_cert_file_func.assert_called_once_with(database.server_cert)