cryptex_test.go

//
// Copyright (C) 2020 Dmitry Kolesnikov
//
// This file may be modified and distributed under the terms
// of the MIT license.  See the LICENSE file for details.
// https://github.com/fogfish/cryptex
//

package cryptex_test

import (
	"encoding/json"
	"errors"
	"os"
	"testing"

	"github.com/aws/aws-sdk-go/service/kms"
	"github.com/aws/aws-sdk-go/service/kms/kmsiface"
	"github.com/fogfish/cryptex"
	"github.com/fogfish/cryptex/cipher"
	"github.com/fogfish/golem/generic"
	"github.com/fogfish/it"
)

type MyString struct {
	Secret cryptex.String `json:"secret"`
}

type MyJSON struct {
	Secret cryptex.AnyT `json:"secret"`
}

func TestStringUnmarshalJSON(t *testing.T) {
	cipher.Default = cipher.NewNone()

	value := MyString{}
	input := []byte("{\"secret\":\"cGxhaW50ZXh0\"}")

	it.Ok(t).
		If(json.Unmarshal(input, &value)).Should().Equal(nil).
		If(value.Secret).Should().Equal(cryptex.String("plaintext")).
		If(value.Secret.PlainText()).Should().Equal("plaintext")
}

func TestStringUnmarshalFail(t *testing.T) {
	cipher.Default = cipher.NewKMS(fail{})

	value := MyString{}
	input := []byte("{\"secret\":\"cGxhaW50ZXh0\"}")

	it.Ok(t).
		If(
			func() error {
				return json.Unmarshal(input, &value)
			},
		).Should().Intercept(ErrDecrypt)
}

func TestStringMarshalJSON(t *testing.T) {
	cipher.Default = cipher.NewNone()
	cipher.Default.UseKey("alias/mykms/key")

	value := MyString{cryptex.String("plaintext")}
	bytes, err := json.Marshal(value)

	it.Ok(t).
		If(err).Should().Equal(nil).
		If(bytes).Should().Equal([]byte("{\"secret\":\"cGxhaW50ZXh0\"}"))
}

func TestStringMarshalFail(t *testing.T) {
	cipher.Default = cipher.NewKMS(fail{})

	value := MyString{cryptex.String("plaintext")}

	it.Ok(t).
		If(
			func() error {
				_, err := json.Marshal(value)
				return err
			},
		).Should().Intercept(ErrEncrypt)
}

func TestAnyTUnmarshalJSON(t *testing.T) {
	cipher.Default = cipher.NewNone()

	value := MyJSON{}
	input := []byte("{\"secret\":\"eyJ0ZXh0IjoicGxhaW50ZXh0In0\"}")

	it.Ok(t).
		If(json.Unmarshal(input, &value)).Should().Equal(nil).
		If(value.Secret).Should().Equal(cryptex.AnyT{"text": "plaintext"}).
		If(value.Secret.PlainText()).Should().Equal(generic.L{"text": "plaintext"})
}

func TestAnyTUnmarshalFail(t *testing.T) {
	cipher.Default = cipher.NewKMS(fail{})
	cipher.Default.UseKey("alias/mykms/key")

	value := MyJSON{}
	input := []byte("{\"secret\":\"eyJ0ZXh0IjoicGxhaW50ZXh0In0\"}")

	it.Ok(t).
		If(
			func() error {
				return json.Unmarshal(input, &value)
			},
		).Should().Intercept(ErrDecrypt)
}

func TestAnyTMarshalJSON(t *testing.T) {
	cipher.Default = cipher.NewNone()

	value := MyJSON{cryptex.AnyT{"text": "plaintext"}}
	bytes, err := json.Marshal(value)

	it.Ok(t).
		If(err).Should().Equal(nil).
		If(bytes).Should().Equal([]byte("{\"secret\":\"eyJ0ZXh0IjoicGxhaW50ZXh0In0\"}"))
}

func TestAnyTMarshalFail(t *testing.T) {
	cipher.Default = cipher.NewKMS(fail{})

	value := MyJSON{cryptex.AnyT{"text": "plaintext"}}

	it.Ok(t).
		If(
			func() error {
				_, err := json.Marshal(value)
				return err
			},
		).Should().Intercept(ErrEncrypt)
}

func TestSetenv(t *testing.T) {
	cipher.Default = cipher.NewNone()
	cipher.Default.UseKey("alias/mykms/key")

	err := cryptex.Setenv("SET_KEY", "plaintext")
	val := os.Getenv("SET_KEY")

	it.Ok(t).
		If(err).Should().Equal(nil).
		If(val).Should().Equal("cGxhaW50ZXh0")
}

func TestSetenvFail(t *testing.T) {
	cipher.Default = cipher.NewKMS(fail{})

	err := cryptex.Setenv("SET_KEY", "plaintext")

	it.Ok(t).
		If(err).Should().Be().Like(ErrEncrypt)
}

func TestGetenv(t *testing.T) {
	cipher.Default = cipher.NewNone()
	cipher.Default.UseKey("alias/mykms/key")

	os.Setenv("GET_KEY", "cGxhaW50ZXh0")

	it.Ok(t).
		If(cryptex.Getenv("GET_KEY")).Should().Equal("plaintext")
}

func TestGetenvFail(t *testing.T) {
	cipher.Default = cipher.NewKMS(fail{})

	os.Setenv("GET_KEY", "cGxhaW50ZXh0")

	it.Ok(t).
		If(cryptex.Getenv("GET_KEY")).Should().Equal("")
}

//
//
type fail struct {
	kmsiface.KMSAPI
}

var ErrDecrypt = errors.New("Unable to decrypt")
var ErrEncrypt = errors.New("Unable to encrypt")

func (fail) Decrypt(input *kms.DecryptInput) (*kms.DecryptOutput, error) {
	return nil, ErrDecrypt
}

func (fail) Encrypt(input *kms.EncryptInput) (*kms.EncryptOutput, error) {
	return nil, ErrEncrypt
}