61 lines
1.8 KiB
Python
61 lines
1.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
import os
|
|
import sys
|
|
import tempfile
|
|
|
|
import pytest
|
|
from cryptography.fernet import Fernet
|
|
|
|
_scripts = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), "scripts")
|
|
if _scripts not in sys.path:
|
|
sys.path.insert(0, _scripts)
|
|
|
|
from service.master_key import ( # noqa: E402
|
|
ENV_MASTER_KEY,
|
|
MasterKeyMissingError,
|
|
load_master_key,
|
|
write_master_key_file,
|
|
)
|
|
|
|
|
|
@pytest.fixture()
|
|
def iso_mk(monkeypatch):
|
|
tmp = tempfile.mkdtemp(prefix="mk_test_")
|
|
data_root = os.path.join(tmp, "claw-data")
|
|
os.makedirs(data_root, exist_ok=True)
|
|
monkeypatch.setenv("JIANGCHANG_DATA_ROOT", data_root)
|
|
monkeypatch.setenv("JIANGCHANG_USER_ID", "mk_uid")
|
|
monkeypatch.delenv(ENV_MASTER_KEY, raising=False)
|
|
yield tmp
|
|
|
|
|
|
def test_env_priority_over_file(iso_mk, monkeypatch):
|
|
key_env = Fernet.generate_key()
|
|
key_file = Fernet.generate_key()
|
|
monkeypatch.setenv(ENV_MASTER_KEY, key_env.decode("ascii"))
|
|
write_master_key_file(key_file, allow_overwrite=True)
|
|
assert load_master_key() == key_env
|
|
|
|
|
|
def test_file_fallback(iso_mk):
|
|
key_file = Fernet.generate_key()
|
|
write_master_key_file(key_file, allow_overwrite=True)
|
|
assert load_master_key() == key_file
|
|
|
|
|
|
def test_missing_raises(iso_mk):
|
|
with pytest.raises(MasterKeyMissingError) as ei:
|
|
load_master_key()
|
|
assert ei.value.code == "ERR_MASTER_KEY_MISSING"
|
|
|
|
|
|
def test_invalid_env_falls_back_to_file(iso_mk, monkeypatch):
|
|
monkeypatch.setenv(ENV_MASTER_KEY, "not-a-real-key")
|
|
with pytest.raises(MasterKeyMissingError):
|
|
load_master_key()
|
|
|
|
key_file = Fernet.generate_key()
|
|
write_master_key_file(key_file, allow_overwrite=True)
|
|
monkeypatch.setenv(ENV_MASTER_KEY, "not-a-real-key")
|
|
assert load_master_key() == key_file
|