mirror of
https://github.com/sobolevn/git-secret
synced 2024-11-18 15:26:58 +00:00
149 lines
3.6 KiB
Bash
149 lines
3.6 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load _test_base
|
|
|
|
FILE_TO_HIDE="$TEST_DEFAULT_FILENAME"
|
|
FILE_CONTENTS="hidden content юникод"
|
|
|
|
FINGERPRINT=""
|
|
|
|
|
|
function setup {
|
|
FINGERPRINT=$(install_fixture_full_key "$TEST_DEFAULT_USER")
|
|
|
|
set_state_initial
|
|
set_state_git
|
|
set_state_secret_init
|
|
set_state_secret_tell "$TEST_DEFAULT_USER"
|
|
set_state_secret_add "$FILE_TO_HIDE" "$FILE_CONTENTS"
|
|
set_state_secret_hide
|
|
}
|
|
|
|
|
|
function teardown {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
uninstall_fixture_full_key "$TEST_DEFAULT_USER" "$FINGERPRINT"
|
|
unset_current_state
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with password argument" {
|
|
cp "$FILE_TO_HIDE" "${FILE_TO_HIDE}2"
|
|
rm -f "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
cmp -s "$FILE_TO_HIDE" "${FILE_TO_HIDE}2"
|
|
|
|
rm "${FILE_TO_HIDE}2"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with '-f'" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
run git secret reveal -f -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with '-P'" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
|
|
local secret_file=$(_get_encrypted_filename "$FILE_TO_HIDE")
|
|
chmod o-rwx "$secret_file"
|
|
|
|
run git secret reveal -P -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
|
|
local secret_perm
|
|
local file_perm
|
|
secret_perm=$(ls -l "$FILE_TO_HIDE".secret | cut -d' ' -f1)
|
|
file_perm=$(ls -l "$FILE_TO_HIDE" | cut -d' ' -f1)
|
|
|
|
# text prefixed with '# ' and sent to file descriptor 3 is 'diagnostic' (debug) output for devs
|
|
#echo "# secret_perm: $secret_perm, file_perm: $file_perm" >&3
|
|
|
|
[ "$secret_perm" = "$file_perm" ]
|
|
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
@test "run 'reveal' with wrong password" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "WRONG"
|
|
[ "$status" -eq 2 ]
|
|
[ ! -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for attacker" {
|
|
# Preparations
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local atacker_fingerprint=$(install_fixture_full_key "$TEST_ATTACKER_USER")
|
|
local password=$(test_user_password "$TEST_ATTACKER_USER")
|
|
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
# This should fail, nothing should be created:
|
|
[ "$status" -eq 2 ]
|
|
[ ! -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_ATTACKER_USER" "$atacker_fingerprint"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for multiple users (with key deletion)" {
|
|
# Preparations:
|
|
local second_fingerprint=$(install_fixture_full_key "$TEST_SECOND_USER")
|
|
local password=$(test_user_password "$TEST_SECOND_USER")
|
|
set_state_secret_tell "$TEST_SECOND_USER"
|
|
set_state_secret_hide
|
|
|
|
# We are removing a secret key of the first user to be sure
|
|
# that it is not used in decryption:
|
|
uninstall_fixture_full_key "$TEST_DEFAULT_USER" "$FINGERPRINT"
|
|
|
|
# Testing:
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_SECOND_USER" "$second_fingerprint"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for multiple users (normally)" {
|
|
# Preparations:
|
|
local second_fingerprint=$(install_fixture_full_key "$TEST_SECOND_USER")
|
|
# bug in gpg v2.0.22, need to use default password
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
set_state_secret_tell "$TEST_SECOND_USER"
|
|
set_state_secret_hide
|
|
|
|
# Testing:
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_SECOND_USER" "$second_fingerprint"
|
|
}
|