106 lines
3.8 KiB
Ruby
106 lines
3.8 KiB
Ruby
require "test_helper"
|
|
|
|
class EnpassAdapterTest < SecretAdapterTestCase
|
|
setup do
|
|
`true` # Ensure $? is 0
|
|
end
|
|
|
|
test "fetch without CLI installed" do
|
|
stub_ticks_with("enpass-cli version 2> /dev/null", succeed: false)
|
|
|
|
error = assert_raises RuntimeError do
|
|
JSON.parse(shellunescape(run_command("fetch", "mynote")))
|
|
end
|
|
|
|
assert_equal "Enpass CLI is not installed", error.message
|
|
end
|
|
|
|
test "fetch one item" do
|
|
stub_ticks_with("enpass-cli version 2> /dev/null")
|
|
|
|
stub_ticks
|
|
.with("enpass-cli -json -vault vault-path show FooBar/SECRET_1")
|
|
.returns(<<~JSON)
|
|
[{"category":"computer","label":"SECRET_1","login":"","password":"my-password-1","title":"FooBar","type":"password"}]
|
|
JSON
|
|
|
|
json = JSON.parse(shellunescape(run_command("fetch", "FooBar/SECRET_1")))
|
|
|
|
expected_json = { "FooBar/SECRET_1" => "my-password-1" }
|
|
|
|
assert_equal expected_json, json
|
|
end
|
|
|
|
test "fetch multiple items" do
|
|
stub_ticks_with("enpass-cli version 2> /dev/null")
|
|
|
|
stub_ticks
|
|
.with("enpass-cli -json -vault vault-path show FooBar/SECRET_1 FooBar/SECRET_2")
|
|
.returns(<<~JSON)
|
|
[
|
|
{"category":"computer","label":"SECRET_1","login":"","password":"my-password-1","title":"FooBar","type":"password"},
|
|
{"category":"computer","label":"SECRET_2","login":"","password":"my-password-2","title":"FooBar","type":"password"},
|
|
{"category":"computer","label":"SECRET_3","login":"","password":"my-password-1","title":"Hello","type":"password"}
|
|
]
|
|
JSON
|
|
|
|
json = JSON.parse(shellunescape(run_command("fetch", "FooBar/SECRET_1", "FooBar/SECRET_2")))
|
|
|
|
expected_json = { "FooBar/SECRET_1" => "my-password-1", "FooBar/SECRET_2" => "my-password-2" }
|
|
|
|
assert_equal expected_json, json
|
|
end
|
|
|
|
test "fetch multiple items with from" do
|
|
stub_ticks_with("enpass-cli version 2> /dev/null")
|
|
|
|
stub_ticks
|
|
.with("enpass-cli -json -vault vault-path show FooBar/SECRET_1 FooBar/SECRET_2")
|
|
.returns(<<~JSON)
|
|
[
|
|
{"category":"computer","label":"SECRET_1","login":"","password":"my-password-1","title":"FooBar","type":"password"},
|
|
{"category":"computer","label":"SECRET_2","login":"","password":"my-password-2","title":"FooBar","type":"password"},
|
|
{"category":"computer","label":"SECRET_3","login":"","password":"my-password-1","title":"Hello","type":"password"}
|
|
]
|
|
JSON
|
|
|
|
json = JSON.parse(shellunescape(run_command("fetch", "--from", "FooBar", "SECRET_1", "SECRET_2")))
|
|
|
|
expected_json = { "FooBar/SECRET_1" => "my-password-1", "FooBar/SECRET_2" => "my-password-2" }
|
|
|
|
assert_equal expected_json, json
|
|
end
|
|
|
|
test "fetch all with from" do
|
|
stub_ticks_with("enpass-cli version 2> /dev/null")
|
|
|
|
stub_ticks
|
|
.with("enpass-cli -json -vault vault-path show FooBar")
|
|
.returns(<<~JSON)
|
|
[
|
|
{"category":"computer","label":"SECRET_1","login":"","password":"my-password-1","title":"FooBar","type":"password"},
|
|
{"category":"computer","label":"SECRET_2","login":"","password":"my-password-2","title":"FooBar","type":"password"},
|
|
{"category":"computer","label":"SECRET_3","login":"","password":"my-password-1","title":"Hello","type":"password"},
|
|
{"category":"computer","label":"","login":"","password":"my-password-3","title":"FooBar","type":"password"}
|
|
]
|
|
JSON
|
|
|
|
json = JSON.parse(shellunescape(run_command("fetch", "FooBar")))
|
|
|
|
expected_json = { "FooBar/SECRET_1" => "my-password-1", "FooBar/SECRET_2" => "my-password-2", "FooBar" => "my-password-3" }
|
|
|
|
assert_equal expected_json, json
|
|
end
|
|
|
|
private
|
|
def run_command(*command)
|
|
stdouted do
|
|
Kamal::Cli::Secrets.start \
|
|
[ *command,
|
|
"-c", "test/fixtures/deploy_with_accessories.yml",
|
|
"--adapter", "enpass",
|
|
"--account", "vault-path" ]
|
|
end
|
|
end
|
|
end
|