mirror of
https://github.com/sobolevn/git-secret
synced 2024-11-06 15:20:36 +00:00
9d0a2ac1c1
Changes: 1. Fixes #86, now all variables are accessed as functions 2. Fixes #85, now these use cases are working correctly 3. Fixes #83, now init works relative to `.git` folder 4. Closes #77, zsh-plugin is deprecated 5. Refs #53, done some refactoring to tests 6. Closes #82, added additional information to pull-request template 7. Refs #22, plugins are deprecated 8. Also made a lot of improvments into both code and tests
123 lines
2.9 KiB
Bash
123 lines
2.9 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load _test_base
|
|
|
|
FILE_TO_HIDE="file_to_hide"
|
|
FILE_CONTENTS="hidden content юникод"
|
|
|
|
FINGERPRINT=""
|
|
|
|
|
|
function setup {
|
|
FINGERPRINT=$(install_fixture_full_key "$TEST_DEFAULT_USER")
|
|
|
|
set_state_initial
|
|
set_state_git
|
|
set_state_secret_init
|
|
set_state_secret_tell "$TEST_DEFAULT_USER"
|
|
set_state_secret_add "$FILE_TO_HIDE" "$FILE_CONTENTS"
|
|
set_state_secret_hide
|
|
}
|
|
|
|
|
|
function teardown {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
uninstall_fixture_full_key "$TEST_DEFAULT_USER" "$FINGERPRINT"
|
|
unset_current_state
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with password argument" {
|
|
cp "$FILE_TO_HIDE" "${FILE_TO_HIDE}2"
|
|
rm -f "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
cmp --silent "$FILE_TO_HIDE" "${FILE_TO_HIDE}2"
|
|
|
|
rm "${FILE_TO_HIDE}2"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with '-f'" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local password=$(test_user_password "$TEST_DEFAULT_USER")
|
|
run git secret reveal -f -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
|
|
@test "run 'reveal' with wrong password" {
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "WRONG"
|
|
[ "$status" -eq 2 ]
|
|
[ ! -f "$FILE_TO_HIDE" ]
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for attacker" {
|
|
# Preparations
|
|
rm "$FILE_TO_HIDE"
|
|
|
|
local atacker_fingerprint=$(install_fixture_full_key "$TEST_ATTACKER_USER")
|
|
local password=$(test_user_password "$TEST_ATTACKER_USER")
|
|
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
# This should fail, nothing should be created:
|
|
[ "$status" -eq 2 ]
|
|
[ ! -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_ATTACKER_USER" "$atacker_fingerprint"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for multiple users (with key deletion)" {
|
|
# Preparations:
|
|
local second_fingerprint=$(install_fixture_full_key "$TEST_SECOND_USER")
|
|
local password=$(test_user_password "$TEST_SECOND_USER")
|
|
set_state_secret_tell "$TEST_SECOND_USER"
|
|
set_state_secret_hide
|
|
|
|
# We are removing a secret key of the first user to be sure
|
|
# that it is not used in decryption:
|
|
uninstall_fixture_full_key "$TEST_DEFAULT_USER" "$FINGERPRINT"
|
|
|
|
# Testing:
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_SECOND_USER" "$second_fingerprint"
|
|
}
|
|
|
|
|
|
@test "run 'reveal' for multiple users (normally)" {
|
|
# Preparations:
|
|
local second_fingerprint=$(install_fixture_full_key "$TEST_SECOND_USER")
|
|
local password=$(test_user_password "$TEST_SECOND_USER")
|
|
set_state_secret_tell "$TEST_SECOND_USER"
|
|
set_state_secret_hide
|
|
|
|
# Testing:
|
|
run git secret reveal -d "$TEST_GPG_HOMEDIR" -p "$password"
|
|
|
|
[ "$status" -eq 0 ]
|
|
[ -f "$FILE_TO_HIDE" ]
|
|
|
|
# Cleaning up:
|
|
uninstall_fixture_full_key "$TEST_SECOND_USER" "$second_fingerprint"
|
|
}
|