mirror of
https://github.com/hatchet-dev/hatchet.git
synced 2025-12-30 13:19:44 -06:00
ffbeafc204
* re-add new testing harness * add healthcheck port and pick random grpc port to listen on * feat: parallel load tests and faster tests * make parallelism = 5 * fix: lint * add linter to pre * fix: add back rampup fixes * reduce matrix on PR, add matrix to pre-release step * make load tests less likely to block * make limit strategy group round robin * uncomment lines
141 lines
3.5 KiB
Go
141 lines
3.5 KiB
Go
//go:build !e2e && !load && !rampup && !integration
|
|
|
|
package encryption
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/tink-crypto/tink-go/testing/fakekms"
|
|
)
|
|
|
|
var (
|
|
fakeKeyURI = "fake-kms://CM2b3_MDElQKSAowdHlwZS5nb29nbGVhcGlzLmNvbS9nb29nbGUuY3J5cHRvLnRpbmsuQWVzR2NtS2V5EhIaEIK75t5L-adlUwVhWvRuWUwYARABGM2b3_MDIAE"
|
|
fakeCredentialsJSON = []byte(`{}`)
|
|
)
|
|
|
|
func TestNewCloudKMSEncryptionValid(t *testing.T) {
|
|
// Using fake KMS client for testing
|
|
client, err := fakekms.NewClient(fakeKeyURI)
|
|
assert.NoError(t, err)
|
|
|
|
// generate JWT keysets
|
|
privateEc256, publicEc256, err := generateJWTKeysetsWithClient(fakeKeyURI, client)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
// Create encryption service with valid key URI and credentials
|
|
svc, err := newWithClient(client, fakeKeyURI, privateEc256, publicEc256)
|
|
assert.NoError(t, err)
|
|
assert.NotNil(t, svc)
|
|
}
|
|
|
|
func TestNewCloudKMSEncryptionInvalidKeyUri(t *testing.T) {
|
|
// Create encryption service with invalid key URI
|
|
_, err := NewCloudKMSEncryption("invalid-key-uri", fakeCredentialsJSON, nil, nil)
|
|
assert.Error(t, err)
|
|
}
|
|
|
|
func TestNewCloudKMSEncryptionInvalidCredentials(t *testing.T) {
|
|
// Create encryption service with invalid credentials
|
|
_, err := NewCloudKMSEncryption(fakeKeyURI, []byte("invalid credentials"), nil, nil)
|
|
assert.Error(t, err)
|
|
}
|
|
|
|
func TestEncryptDecryptCloudKMS(t *testing.T) {
|
|
// Using fake KMS client for testing
|
|
client, err := fakekms.NewClient(fakeKeyURI)
|
|
assert.NoError(t, err)
|
|
|
|
// generate JWT keysets
|
|
privateEc256, publicEc256, err := generateJWTKeysetsWithClient(fakeKeyURI, client)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
// Create encryption service with valid key URI and credentials
|
|
svc, err := newWithClient(client, fakeKeyURI, privateEc256, publicEc256)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
plaintext := []byte("test message")
|
|
dataID := "123"
|
|
|
|
// Encrypt
|
|
ciphertext, err := svc.Encrypt(plaintext, dataID)
|
|
assert.NoError(t, err)
|
|
|
|
// Decrypt
|
|
decryptedText, err := svc.Decrypt(ciphertext, dataID)
|
|
assert.NoError(t, err)
|
|
|
|
// Check if decrypted text matches original plaintext
|
|
assert.Equal(t, plaintext, decryptedText)
|
|
}
|
|
|
|
func TestEncryptDecryptCloudKMSStringBase64(t *testing.T) {
|
|
// Using fake KMS client for testing
|
|
client, err := fakekms.NewClient(fakeKeyURI)
|
|
assert.NoError(t, err)
|
|
|
|
// generate JWT keysets
|
|
privateEc256, publicEc256, err := generateJWTKeysetsWithClient(fakeKeyURI, client)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
// Create encryption service with valid key URI and credentials
|
|
svc, err := newWithClient(client, fakeKeyURI, privateEc256, publicEc256)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
plaintext := "test message"
|
|
dataID := "123"
|
|
|
|
// Encrypt
|
|
ciphertext, err := svc.EncryptString(plaintext, dataID)
|
|
assert.NoError(t, err)
|
|
|
|
// Decrypt
|
|
decryptedText, err := svc.DecryptString(ciphertext, dataID)
|
|
assert.NoError(t, err)
|
|
|
|
// Check if decrypted text matches original plaintext
|
|
assert.Equal(t, plaintext, decryptedText)
|
|
}
|
|
|
|
func TestEncryptDecryptCloudKMSWithEmptyDataID(t *testing.T) {
|
|
// Using fake KMS client for testing
|
|
client, err := fakekms.NewClient(fakeKeyURI)
|
|
assert.NoError(t, err)
|
|
|
|
// generate JWT keysets
|
|
privateEc256, publicEc256, err := generateJWTKeysetsWithClient(fakeKeyURI, client)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
// Create encryption service with valid key URI and credentials
|
|
svc, err := newWithClient(client, fakeKeyURI, privateEc256, publicEc256)
|
|
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
plaintext := []byte("test message")
|
|
emptyDataID := ""
|
|
|
|
// Encrypt with empty data ID
|
|
_, err = svc.Encrypt(plaintext, emptyDataID)
|
|
assert.Error(t, err)
|
|
}
|