Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 31 additions & 0 deletions github/actions_secrets.go
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,9 @@ package github

import (
"context"
"encoding/json"
"fmt"
"strconv"
)

// PublicKey represents the public key that should be used to encrypt secrets.
Expand All @@ -16,6 +18,35 @@ type PublicKey struct {
Key *string `json:"key"`
}

// UnmarshalJSON implements the json.Unmarshaler interface.
// This ensures GitHub Enterprise versions which return a numeric key id
// do not error out when unmarshaling.
func (p *PublicKey) UnmarshalJSON(data []byte) error {
Comment thread
Azuka marked this conversation as resolved.
var pk struct {
KeyID interface{} `json:"key_id,string"`
Key *string `json:"key"`
}

if err := json.Unmarshal(data, &pk); err != nil {
return err
Comment thread
Azuka marked this conversation as resolved.
}

p.Key = pk.Key

switch v := pk.KeyID.(type) {
case nil:
return nil
case string:
p.KeyID = &v
case float64:
p.KeyID = String(strconv.FormatFloat(v, 'f', -1, 64))
default:
return fmt.Errorf("unable to unmarshal %T as a string", v)
}

return nil
}

// GetRepoPublicKey gets a public key that should be used for secret encryption.
//
// GitHub API docs: https://docs.github.com/en/free-pro-team@latest/rest/reference/actions/#get-a-repository-public-key
Expand Down
112 changes: 112 additions & 0 deletions github/actions_secrets_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,90 @@ package github

import (
"context"
"encoding/json"
"fmt"
"net/http"
"reflect"
"testing"
"time"
)

func TestPublicKey_UnmarshalJSON(t *testing.T) {
var testCases = map[string]struct {
data []byte
wantPublicKey PublicKey
wantErr bool
}{
"Empty": {
Comment thread
Azuka marked this conversation as resolved.
data: []byte("{}"),
wantPublicKey: PublicKey{},
wantErr: false,
},
"Invalid JSON": {
data: []byte("{"),
wantPublicKey: PublicKey{},
wantErr: true,
},
"Numeric KeyID": {
data: []byte(`{"key_id":1234,"key":"2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234"}`),
Comment thread
Azuka marked this conversation as resolved.
wantPublicKey: PublicKey{KeyID: String("1234"), Key: String("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234")},
wantErr: false,
},
"String KeyID": {
data: []byte(`{"key_id":"1234","key":"2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234"}`),
Comment thread
Azuka marked this conversation as resolved.
wantPublicKey: PublicKey{KeyID: String("1234"), Key: String("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234")},
wantErr: false,
},
"Invalid KeyID": {
data: []byte(`{"key_id":["1234"],"key":"2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234"}`),
wantPublicKey: PublicKey{KeyID: nil, Key: String("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234")},
wantErr: true,
},
"Invalid Key": {
data: []byte(`{"key":123}`),
wantPublicKey: PublicKey{KeyID: nil, Key: nil},
wantErr: true,
},
"Nil": {
data: nil,
wantPublicKey: PublicKey{KeyID: nil, Key: nil},
wantErr: true,
},
"Empty String": {
data: []byte(""),
wantPublicKey: PublicKey{KeyID: nil, Key: nil},
wantErr: true,
},
"Missing Key": {
data: []byte(`{"key_id":"1234"}`),
wantPublicKey: PublicKey{KeyID: String("1234")},
wantErr: false,
},
"Missing KeyID": {
data: []byte(`{"key":"2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234"}`),
wantPublicKey: PublicKey{Key: String("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234")},
wantErr: false,
},
}

for name, tt := range testCases {
tt := tt
t.Run(name, func(t *testing.T) {
pk := PublicKey{}
err := json.Unmarshal(tt.data, &pk)
if err == nil && tt.wantErr {
t.Errorf("PublicKey.UnmarshalJSON returned nil instead of an error")
}
if err != nil && !tt.wantErr {
t.Errorf("PublicKey.UnmarshalJSON returned an unexpected error: %+v", err)
}
if !reflect.DeepEqual(tt.wantPublicKey, pk) {
t.Errorf("PublicKey.UnmarshalJSON expected public key %+v, got %+v", tt.wantPublicKey, pk)
}
})
}
}

func TestActionsService_GetRepoPublicKey(t *testing.T) {
client, mux, _, teardown := setup()
defer teardown()
Expand Down Expand Up @@ -49,6 +126,41 @@ func TestActionsService_GetRepoPublicKey(t *testing.T) {
})
}

func TestActionsService_GetRepoPublicKeyNumeric(t *testing.T) {
client, mux, _, teardown := setup()
defer teardown()

mux.HandleFunc("/repos/o/r/actions/secrets/public-key", func(w http.ResponseWriter, r *http.Request) {
testMethod(t, r, "GET")
fmt.Fprint(w, `{"key_id":1234,"key":"2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234"}`)
})

ctx := context.Background()
key, _, err := client.Actions.GetRepoPublicKey(ctx, "o", "r")
if err != nil {
t.Errorf("Actions.GetRepoPublicKey returned error: %v", err)
}

want := &PublicKey{KeyID: String("1234"), Key: String("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234")}
if !reflect.DeepEqual(key, want) {
t.Errorf("Actions.GetRepoPublicKey returned %+v, want %+v", key, want)
}

const methodName = "GetRepoPublicKey"
testBadOptions(t, methodName, func() (err error) {
_, _, err = client.Actions.GetRepoPublicKey(ctx, "\n", "\n")
return err
})

testNewRequestAndDoFailure(t, methodName, client, func() (*Response, error) {
got, resp, err := client.Actions.GetRepoPublicKey(ctx, "o", "r")
if got != nil {
t.Errorf("testNewRequestAndDoFailure %v = %#v, want nil", methodName, got)
}
return resp, err
})
}

func TestActionsService_ListRepoSecrets(t *testing.T) {
client, mux, _, teardown := setup()
defer teardown()
Expand Down