encrypted_attributes_test.rb

require File.dirname(__FILE__) + '/../test_helper'

class EncryptedAttributesTest < ActiveSupport::TestCase
  def setup
    User.encrypts :password
  end
  
  def test_should_use_sha_by_default
    user = create_user(:login => 'admin', :password => 'secret')
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def test_should_encrypt_on_invalid_model
    user = new_user(:login => nil, :password => 'secret')
    assert !user.valid?
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def test_should_not_encrypt_if_attribute_is_nil
    user = create_user(:login => 'admin', :password => nil)
    assert_nil user.password
  end
  
  def test_should_not_encrypt_if_attribute_is_blank
    user = create_user(:login => 'admin', :password => '')
    assert_equal '', user.password
  end
  
  def test_should_not_encrypt_if_already_encrypted
    user = create_user(:login => 'admin', :password => 'secret'.encrypt)
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def test_should_return_encrypted_attribute_for_saved_record
    user = create_user(:login => 'admin', :password => 'secret')
    user = User.find(user.id)
    assert user.password.encrypted?
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def test_should_not_encrypt_attribute_if_updating_without_any_changes
    user = create_user(:login => 'admin', :password => 'secret')
    user.login = 'Administrator'
    user.save!
    assert user.password.encrypted?
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def test_should_encrypt_attribute_if_updating_with_changes
    user = create_user(:login => 'admin', :password => 'secret')
    user.password = 'shhh'
    user.save!
    assert user.password.encrypted?
    assert_equal '162cf5debf84cbc2af13da848544c3e2c515b4d3', "#{user.password}"
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end

class EncryptedAttributesWithDifferentTargetTest < ActiveSupport::TestCase
  def setup
    User.encrypts :password, :to => :crypted_password
  end
  
  def test_should_not_encrypt_if_attribute_is_nil
    user = create_user(:login => 'admin', :password => nil)
    assert_nil user.password
    assert_nil user.crypted_password
  end
  
  def test_should_not_encrypt_if_attribute_is_blank
    user = create_user(:login => 'admin', :password => '')
    assert_equal '', user.password
    assert_nil user.crypted_password
  end
  
  def test_should_not_encrypt_if_already_encrypted
    user = create_user(:login => 'admin', :crypted_password => 'secret'.encrypt)
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.crypted_password}"
  end
  
  def test_should_return_encrypted_attribute_for_saved_record
    user = create_user(:login => 'admin', :password => 'secret')
    user = User.find(user.id)
    assert user.crypted_password.encrypted?
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.crypted_password}"
  end
  
  def test_should_not_encrypt_attribute_if_updating_without_any_changes
    user = create_user(:login => 'admin', :password => 'secret')
    user.login = 'Administrator'
    user.save!
    assert user.crypted_password.encrypted?
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.crypted_password}"
  end
  
  def test_should_encrypt_attribute_if_updating_with_changes
    user = create_user(:login => 'admin', :password => 'secret')
    user.password = 'shhh'
    user.save!
    assert user.crypted_password.encrypted?
    assert_equal '162cf5debf84cbc2af13da848544c3e2c515b4d3', "#{user.crypted_password}"
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end

class EncryptedAttributesWithConditionalsTest < ActiveSupport::TestCase
  def test_should_not_encrypt_if_if_conditional_is_false
    User.encrypts :password, :if => lambda {|user| false}
    user = create_user(:login => 'admin', :password => 'secret')
    assert_equal 'secret', user.password
  end
  
  def test_should_encrypt_if_if_conditional_is_true
    User.encrypts :password, :if => lambda {|user| true}
    user = create_user(:login => 'admin', :password => 'secret')
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def test_should_not_encrypt_if_unless_conditional_is_true
    User.encrypts :password, :unless => lambda {|user| true}
    user = create_user(:login => 'admin', :password => 'secret')
    assert_equal 'secret', user.password
  end
  
  def test_should_encrypt_if_unless_conditional_is_false
    User.encrypts :password, :unless => lambda {|user| false}
    user = create_user(:login => 'admin', :password => 'secret')
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{user.password}"
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end

class ShaEncryptionTest < ActiveSupport::TestCase
  def setup
    User.encrypts :password, :mode => :sha
    @user = create_user(:login => 'admin', :password => 'secret')
  end
  
  def test_should_encrypt_password
    assert_equal '8152bc582f58c854f580cb101d3182813dec4afe', "#{@user.password}"
  end
  
  def test_should_be_encrypted
    assert @user.password.encrypted?
  end
  
  def test_should_use_sha_cipher
    assert_instance_of EncryptedAttributes::ShaCipher, @user.password.cipher
  end
  
  def test_should_use_default_salt
    assert_equal 'salt', @user.password.cipher.salt
  end
  
  def test_should_be_able_to_check_password
    assert_equal 'secret', @user.password
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end

class ShaWithCustomSaltEncryptionTest < ActiveSupport::TestCase
  def setup
    User.encrypts :password, :mode => :sha, :salt => :login
    @user = create_user(:login => 'admin', :password => 'secret')
  end
  
  def test_should_encrypt_password
    assert_equal 'a55d037f385cad22efe7862e07b805938d150154admin', "#{@user.password}"
  end
  
  def test_should_be_encrypted
    assert @user.password.encrypted?
  end
  
  def test_should_use_sha_cipher
    assert_instance_of EncryptedAttributes::ShaCipher, @user.password.cipher
  end
  
  def test_should_use_custom_salt
    assert_equal 'admin', @user.password.cipher.salt
  end
  
  def test_should_be_able_to_check_password
    assert_equal 'secret', @user.password
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end

class SymmetricEncryptionTest < ActiveSupport::TestCase
  def setup
    User.encrypts :password, :mode => :symmetric, :password => 'key'
    @user = create_user(:login => 'admin', :password => 'secret')
  end
  
  def test_should_encrypt_password
    assert_equal "zfKtnSa33tc=\n", @user.password
  end
  
  def test_should_be_encrypted
    assert @user.password.encrypted?
  end
  
  def test_should_use_sha_cipher
    assert_instance_of EncryptedStrings::SymmetricCipher, @user.password.cipher
  end
  
  def test_should_use_custom_password
    assert_equal 'key', @user.password.cipher.password
  end
  
  def test_should_be_able_to_check_password
    assert_equal 'secret', @user.password
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end

class AsymmetricEncryptionTest < ActiveSupport::TestCase
  def setup
    User.encrypts :password, :mode => :asymmetric,
      :private_key_file => File.dirname(__FILE__) + '/../keys/private',
      :public_key_file => File.dirname(__FILE__) + '/../keys/public'
    @user = create_user(:login => 'admin', :password => 'secret')
  end
  
  def test_should_encrypt_password
    assert_not_equal 'secret', "#{@user.password}"
    assert_equal 90, @user.password.length
  end
  
  def test_should_be_encrypted
    assert @user.password.encrypted?
  end
  
  def test_should_use_sha_cipher
    assert_instance_of EncryptedStrings::AsymmetricCipher, @user.password.cipher
  end
  
  def test_should_be_able_to_check_password
    assert_equal 'secret', @user.password
  end
  
  def teardown
    User.class_eval do
      @before_validation_callbacks = nil
    end
  end
end