87 lines
2.5 KiB
Ruby
87 lines
2.5 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require "isolation/abstract_unit"
|
|
require "env_helpers"
|
|
require "rails/command"
|
|
require "rails/commands/credentials/credentials_command"
|
|
|
|
class Rails::Command::CredentialsCommandTest < ActiveSupport::TestCase
|
|
include ActiveSupport::Testing::Isolation, EnvHelpers
|
|
|
|
setup { build_app }
|
|
|
|
teardown { teardown_app }
|
|
|
|
test "edit without editor gives hint" do
|
|
run_edit_command(editor: "").tap do |output|
|
|
assert_match "No $EDITOR to open file in", output
|
|
assert_match "bin/rails credentials:edit", output
|
|
end
|
|
end
|
|
|
|
test "edit credentials" do
|
|
# Run twice to ensure credentials can be reread after first edit pass.
|
|
2.times do
|
|
assert_match(/access_key_id: 123/, run_edit_command)
|
|
end
|
|
end
|
|
|
|
test "edit command does not add master key to gitignore when already exist" do
|
|
run_edit_command
|
|
|
|
Dir.chdir(app_path) do
|
|
gitignore = File.read(".gitignore")
|
|
assert_equal 1, gitignore.scan(%r|config/master\.key|).length
|
|
end
|
|
end
|
|
|
|
test "edit command does not overwrite by default if credentials already exists" do
|
|
run_edit_command(editor: "eval echo api_key: abc >")
|
|
assert_match(/api_key: abc/, run_show_command)
|
|
|
|
run_edit_command
|
|
assert_match(/api_key: abc/, run_show_command)
|
|
end
|
|
|
|
test "edit command does not add master key when `RAILS_MASTER_KEY` env specified" do
|
|
Dir.chdir(app_path) do
|
|
key = IO.binread("config/master.key").strip
|
|
FileUtils.rm("config/master.key")
|
|
|
|
switch_env("RAILS_MASTER_KEY", key) do
|
|
run_edit_command
|
|
assert_not File.exist?("config/master.key")
|
|
end
|
|
end
|
|
end
|
|
|
|
test "show credentials" do
|
|
assert_match(/access_key_id: 123/, run_show_command)
|
|
end
|
|
|
|
test "show command raise error when require_master_key is specified and key does not exist" do
|
|
remove_file "config/master.key"
|
|
add_to_config "config.require_master_key = true"
|
|
|
|
assert_match(/Missing encryption key to decrypt file with/, run_show_command(allow_failure: true))
|
|
end
|
|
|
|
test "show command does not raise error when require_master_key is false and master key does not exist" do
|
|
remove_file "config/master.key"
|
|
add_to_config "config.require_master_key = false"
|
|
|
|
assert_match(/Missing master key to decrypt credentials/, run_show_command)
|
|
end
|
|
|
|
private
|
|
def run_edit_command(editor: "cat")
|
|
switch_env("EDITOR", editor) do
|
|
rails "credentials:edit"
|
|
end
|
|
end
|
|
|
|
def run_show_command(**options)
|
|
rails "credentials:show", **options
|
|
end
|
|
end
|