72 lines
2.4 KiB
Python
72 lines
2.4 KiB
Python
|
from __future__ import annotations
|
||
|
|
|
||
|
|
import os
|
||
|
|
|
||
|
|
import pytest
|
||
|
|
|
||
|
|
from yuxi.channels.adapters.nextcloudtalk.credentials import (
|
||
|
|
read_secret_file,
|
||
|
|
resolve_credential,
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
class TestReadSecretFile:
|
||
|
|
def test_reads_content(self, tmp_path):
|
||
|
|
file_path = tmp_path / "secret.txt"
|
||
|
|
file_path.write_text(" my-secret-value ", encoding="utf-8")
|
||
|
|
result = read_secret_file(str(file_path))
|
||
|
|
assert result == "my-secret-value"
|
||
|
|
|
||
|
|
def test_empty_content(self, tmp_path):
|
||
|
|
file_path = tmp_path / "empty.txt"
|
||
|
|
file_path.write_text(" \n ", encoding="utf-8")
|
||
|
|
result = read_secret_file(str(file_path))
|
||
|
|
assert result == ""
|
||
|
|
|
||
|
|
def test_empty_path_raises(self):
|
||
|
|
with pytest.raises(ValueError, match="filepath cannot be empty"):
|
||
|
|
read_secret_file("")
|
||
|
|
|
||
|
|
def test_file_not_found(self, tmp_path):
|
||
|
|
with pytest.raises(ValueError, match="Secret file not found"):
|
||
|
|
read_secret_file(str(tmp_path / "nonexistent.txt"))
|
||
|
|
|
||
|
|
def test_symlink_blocked(self, tmp_path):
|
||
|
|
real_file = tmp_path / "real_secret.txt"
|
||
|
|
real_file.write_text("secret", encoding="utf-8")
|
||
|
|
symlink = tmp_path / "symlink_secret.txt"
|
||
|
|
try:
|
||
|
|
if hasattr(os, "symlink"):
|
||
|
|
os.symlink(str(real_file), str(symlink))
|
||
|
|
with pytest.raises(ValueError, match="symlinks"):
|
||
|
|
read_secret_file(str(symlink))
|
||
|
|
except OSError:
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class TestResolveCredential:
|
||
|
|
def test_direct_value_wins(self):
|
||
|
|
result = resolve_credential("direct", "file.txt", "MY_ENV")
|
||
|
|
assert result == "direct"
|
||
|
|
|
||
|
|
def test_file_value_when_no_direct(self):
|
||
|
|
result = resolve_credential(None, None, "PATH")
|
||
|
|
assert result != ""
|
||
|
|
|
||
|
|
def test_env_value(self):
|
||
|
|
result = resolve_credential(None, None, "PATH")
|
||
|
|
assert len(result) > 0
|
||
|
|
|
||
|
|
def test_all_empty_returns_empty(self):
|
||
|
|
result = resolve_credential(None, None, "NONEXISTENT_VAR_XYZZY")
|
||
|
|
assert result == ""
|
||
|
|
|
||
|
|
def test_file_takes_priority_over_env(self, tmp_path):
|
||
|
|
file_path = tmp_path / "cred.txt"
|
||
|
|
file_path.write_text("file-value", encoding="utf-8")
|
||
|
|
result = resolve_credential(None, str(file_path), "PATH")
|
||
|
|
assert result == "file-value"
|
||
|
|
|
||
|
|
def test_direct_empty_string_not_used(self):
|
||
|
|
result = resolve_credential("", None, "PATH")
|
||
|
|
assert result != ""
|