agevault/main_test.go at main · ndavd/agevault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
package main

import (
	"os"
	"path/filepath"
	"testing"
)

const (
	testVaultName  = "vault"
	testFooName    = "foo.txt"
	testFooContent = "test"
	testPassphrase = "agevault-test-passphrase"
)

func constPassphrase(string) (string, error) {
	return testPassphrase, nil
}

func runInIsolatedDir(t *testing.T) {
	t.Helper()
	dir := t.TempDir()
	orig, err := os.Getwd()
	if err != nil {
		t.Fatal(err)
	}
	if err := os.Chdir(dir); err != nil {
		t.Fatal(err)
	}
	t.Cleanup(func() {
		if err := os.Chdir(orig); err != nil {
			t.Fatal(err)
		}
	})
}

func assertVaultUnlocked(t *testing.T) {
	t.Helper()
	got, err := os.ReadFile(filepath.Join(testVaultName, testFooName))
	if err != nil {
		t.Fatalf("reading unlocked %s: %v", testFooName, err)
	}
	if string(got) != testFooContent {
		t.Fatalf("%s content = %q, want %q", testFooName, got, testFooContent)
	}
}

func TestUnlockFixtures(t *testing.T) {
	fixtures := map[string]string{
		"v1.0.0-zip": "testdata/v1.0.0-zip-vault",
		"current":    "testdata/current-vault",
	}
	for name, dir := range fixtures {
		t.Run(name, func(t *testing.T) {
			fixturePath, err := filepath.Abs(dir)
			if err != nil {
				t.Fatal(err)
			}

			runInIsolatedDir(t)

			entries, err := os.ReadDir(fixturePath)
			if err != nil {
				t.Fatal(err)
			}
			for _, entry := range entries {
				data, err := os.ReadFile(filepath.Join(fixturePath, entry.Name()))
				if err != nil {
					t.Fatal(err)
				}
				if err := os.WriteFile(entry.Name(), data, 0o644); err != nil {
					t.Fatal(err)
				}
			}

			if err := Unlock(testVaultName, testVaultName, constPassphrase); err != nil {
				t.Fatalf("Unlock() failed: %v", err)
			}

			assertVaultUnlocked(t)
		})
	}
}

func TestLockUnlock(t *testing.T) {
	runInIsolatedDir(t)

	if err := os.Mkdir(testVaultName, 0o755); err != nil {
		t.Fatal(err)
	}
	if err := os.WriteFile(filepath.Join(testVaultName, testFooName), []byte(testFooContent), 0o644); err != nil {
		t.Fatal(err)
	}

	if _, err := Keygen(testVaultName, testPassphrase); err != nil {
		t.Fatalf("Keygen() failed: %v", err)
	}
	if _, err := Lock(testVaultName, testVaultName); err != nil {
		t.Fatalf("Lock() failed: %v", err)
	}
	if err := Unlock(testVaultName, testVaultName, constPassphrase); err != nil {
		t.Fatalf("Unlock() failed: %v", err)
	}

	assertVaultUnlocked(t)
}