keb
f59b77f419
appsettings.json and appsettings.<Environment>.json tracked by git are listed under Repos, keys named as .NET names them (ConnectionStrings:Default). - The secret patterns pick the keys, the rest hidden, with dotnet.secretPatterns for .NET files' own. - An App Service Key Vault reference, @Microsoft.KeyVault(…), is marked as a reference; a BOM at the start is fine. - A .NET icon, themeable with dotnetColor.
101 lines
3.3 KiB
Go
101 lines
3.3 KiB
Go
package repo
|
|
|
|
import (
|
|
"context"
|
|
"maps"
|
|
"testing"
|
|
|
|
"git.kebcloud.no/keb/lazysecrets/internal/provider"
|
|
)
|
|
|
|
func TestIsDotnet(t *testing.T) {
|
|
for f, want := range map[string]bool{
|
|
"appsettings.json": true,
|
|
"src/Api/appsettings.Production.json": true,
|
|
"appsettings.Example.json": true, // listed hidden
|
|
"appsettings.json.bak": false,
|
|
"settings.json": false,
|
|
"package.json": false,
|
|
} {
|
|
if IsDotnet(f) != want {
|
|
t.Errorf("%s: %t", f, !want)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestParseDotnet(t *testing.T) {
|
|
keys, err := parseDotnet("", []byte("\xef\xbb\xbf"+`{
|
|
"ConnectionStrings": { "Default": "Server=db;Password=hunter2" },
|
|
"AzureAd": { "ClientId": "abc", "ClientSecret": "@Microsoft.KeyVault(SecretUri=https://kv.vault.azure.net/secrets/ad)" },
|
|
"Servers": [ { "Name": "a", "ApiKey": "k" } ],
|
|
"Logging": { "LogLevel": { "Default": "Information" } }
|
|
}`))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
got := map[string]string{}
|
|
for _, k := range keys {
|
|
ref := ""
|
|
if k.ref {
|
|
ref = " (ref)"
|
|
}
|
|
got[k.name] = k.value + ref
|
|
}
|
|
want := map[string]string{
|
|
"ConnectionStrings:Default": "Server=db;Password=hunter2",
|
|
"AzureAd:ClientId": "abc",
|
|
"AzureAd:ClientSecret": "@Microsoft.KeyVault(SecretUri=https://kv.vault.azure.net/secrets/ad) (ref)",
|
|
"Servers:0:Name": "a",
|
|
"Servers:0:ApiKey": "k",
|
|
"Logging:LogLevel:Default": "Information",
|
|
}
|
|
if !maps.Equal(got, want) {
|
|
t.Errorf("got %v\nwant %v", got, want)
|
|
}
|
|
}
|
|
|
|
func TestDotnetFiles(t *testing.T) {
|
|
root := gitRepo(t, map[string]string{
|
|
"src/Api/appsettings.json": `{
|
|
"Logging": { "LogLevel": { "Default": "Information" } },
|
|
"ConnectionStrings": { "Default": "Server=db;User Id=app;Password=hunter2" },
|
|
"AzureAd": { "ClientSecret": "@Microsoft.KeyVault(VaultName=kv;SecretName=ad)" }
|
|
}`,
|
|
"src/Api/appsettings.Development.json": `{ "Logging": { "LogLevel": { "Default": "Debug" } } }`,
|
|
})
|
|
t.Setenv("JASYPT_ENCRYPTOR_PASSWORD", "")
|
|
ctx := context.Background()
|
|
p := New(Settings{Dir: root})
|
|
srcs, _ := p.Sources(ctx)
|
|
cs, err := p.Containers(ctx, srcs[0])
|
|
if err != nil || len(cs) != 2 {
|
|
t.Fatalf("files: %+v %v", cs, err)
|
|
}
|
|
for _, c := range cs {
|
|
if c.Detail != "dotnet · json" || c.Hidden != (c.Name == "src/Api/appsettings.Development.json") {
|
|
t.Errorf("%s: %q hidden %t", c.Name, c.Detail, c.Hidden)
|
|
}
|
|
}
|
|
settings := cs[1]
|
|
|
|
keys, _ := p.Objects(ctx, settings, provider.TypeSecret)
|
|
got := map[string]string{}
|
|
for _, k := range shown(keys) {
|
|
got[k.Name] = k.Detail
|
|
}
|
|
// The connection string by its value, the client secret by its name.
|
|
if want := map[string]string{"ConnectionStrings:Default": "", "AzureAd:ClientSecret": "reference"}; !maps.Equal(got, want) {
|
|
t.Errorf("keys %v, want %v", got, want)
|
|
}
|
|
link := provider.Object{Container: provider.Container{Source: srcs[0], Name: "src/Api/appsettings.json"}, Name: "ConnectionStrings:Default"}
|
|
if v, err := p.Value(ctx, link); err != nil || v.Reveal() != "Server=db;User Id=app;Password=hunter2" {
|
|
t.Errorf("value: %q %v", v.Reveal(), err)
|
|
}
|
|
if f, _ := p.File(settings, &link); f.Line != 3 {
|
|
t.Errorf("line %d", f.Line)
|
|
}
|
|
if d, plain := p.configDetails(dotnetType, settings); !plain || d[1].Value != "1, not matched by the secret patterns" {
|
|
t.Errorf("details: %+v %t", d, plain)
|
|
}
|
|
}
|