mirror of https://github.com/sobolevn/git-secret
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
124 lines
2.9 KiB
Bash
124 lines
2.9 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load _test_base
|
|
|
|
FILE_TO_HIDE="$TEST_DEFAULT_FILENAME"
|
|
FILE_CONTENTS="hidden content юникод"
|
|
|
|
FINGERPRINT=""
|
|
|
|
|
|
function setup {
|
|
FINGERPRINT=$(install_fixture_full_key "$TEST_DEFAULT_USER")
|
|
|
|
set_state_initial
|
|
set_state_git
|
|
set_state_secret_init
|
|
set_state_secret_tell "$TEST_DEFAULT_USER"
|
|
set_state_secret_add "$FILE_TO_HIDE" "$FILE_CONTENTS"
|
|
set_state_secret_hide
|
|
}
|
|
|
|
|
|
function teardown {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
uninstall_fixture_full_key "$TEST_DEFAULT_USER" "$FINGERPRINT"
|
|
unset_current_state
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with password argument" {
|
|
cp "$FILE_TO_HIDE" "${FILE_TO_HIDE}2"
|
|
rm -f "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
cmp -s "$FILE_TO_HIDE" "${FILE_TO_HIDE}2"
|
|
|
|
rm "${FILE_TO_HIDE}2"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with '-f'" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
run git secret reveal -f -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with wrong password" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "WRONG"
|
|
[ "$status" -eq 2 ]
|
|
[ ! -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for attacker" {
|
|
# Preparations
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local atacker_fingerprint=$(install_fixture_full_key "$TEST_ATTACKER_USER")
|
|
local password=$(test_user_password "$TEST_ATTACKER_USER")
|
|
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
# This should fail, nothing should be created:
|
|
[ "$status" -eq 2 ]
|
|
[ ! -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_ATTACKER_USER" "$atacker_fingerprint"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for multiple users (with key deletion)" {
|
|
# Preparations:
|
|
local second_fingerprint=$(install_fixture_full_key "$TEST_SECOND_USER")
|
|
local password=$(test_user_password "$TEST_SECOND_USER")
|
|
set_state_secret_tell "$TEST_SECOND_USER"
|
|
set_state_secret_hide
|
|
|
|
# We are removing a secret key of the first user to be sure
|
|
# that it is not used in decryption:
|
|
uninstall_fixture_full_key "$TEST_DEFAULT_USER" "$FINGERPRINT"
|
|
|
|
# Testing:
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_SECOND_USER" "$second_fingerprint"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for multiple users (normally)" {
|
|
# Preparations:
|
|
local second_fingerprint=$(install_fixture_full_key "$TEST_SECOND_USER")
|
|
# bug in gpg v2.0.22, need to use default password
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
set_state_secret_tell "$TEST_SECOND_USER"
|
|
set_state_secret_hide
|
|
|
|
# Testing:
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_SECOND_USER" "$second_fingerprint"
|
|
}
|