1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
// \\ SPIKE: Secure your secrets with SPIFFE. — https://spike.ist/
// \\\\ Copyright 2024-present SPIKE contributors.
// \\\\\ SPDX-License-Identifier: Apache-2.0
package api
// TODO: FIXME
//// stub source (nil pointer acceptable for our stubs)
//var fakeSource *workloadapi.X509Source
//
//func TestAPI_CipherStreamMethods(t *testing.T) {
// a := NewWithSource(fakeSource)
//
// // backup and restore
// origEnc, origDec := cipherEncrypt, cipherDecrypt
// t.Cleanup(func() { cipherEncrypt, cipherDecrypt = origEnc, origDec })
//
// cipherEncrypt = func(_ *workloadapi.X509Source,
// mode cipher.Mode, r io.Reader, contentType string,
// _ []byte, _ string, _ predicate.Predicate,
// ) ([]byte, error) {
// if mode != cipher.ModeStream || contentType != "application/octet-stream" {
// return nil, errors.New("bad mode or content-type")
// }
// b, _ := io.ReadAll(r)
// if string(b) != "plain" {
// return nil, errors.New("unexpected input")
// }
// return []byte("cipher"), nil
// }
// cipherDecrypt = func(_ *workloadapi.X509Source, mode cipher.Mode,
// r io.Reader, contentType string, _ byte, _, _ []byte, _ string,
// _ predicate.Predicate) ([]byte, error) {
// if mode != cipher.ModeStream || contentType != "application/octet-stream" {
// return nil, errors.New("bad mode or content-type")
// }
// b, _ := io.ReadAll(r)
// if string(b) != "cipher" {
// return nil, errors.New("unexpected input")
// }
// return []byte("plain"), nil
// }
//
// out, err := a.CipherEncryptStream(
// bytes.NewReader([]byte("plain")), "application/octet-stream")
// if err != nil {
// t.Fatalf("CipherEncryptStream error: %v", err)
// }
// if string(out) != "cipher" {
// t.Fatalf("unexpected encrypt out: %s", string(out))
// }
//
// out2, err := a.CipherDecryptStream(
// bytes.NewReader([]byte("cipher")), "application/octet-stream")
// if err != nil {
// t.Fatalf("CipherDecryptStream error: %v", err)
// }
// if string(out2) != "plain" {
// t.Fatalf("unexpected decrypt out: %s", string(out2))
// }
//
// // error path
// cipherEncrypt = func(_ *workloadapi.X509Source,
// _ cipher.Mode, _ io.Reader, _ string, _ []byte, _ string,
// _ predicate.Predicate) ([]byte, error) {
// return nil, errors.New("boom")
// }
// if _, err := a.CipherEncryptStream(
// bytes.NewReader(nil), "application/octet-stream"); err == nil {
// t.Fatalf("expected error from CipherEncryptStream")
// }
//}
//
//func TestAPI_CipherJSONMethods(t *testing.T) {
// a := NewWithSource(fakeSource)
//
// origEnc, origDec := cipherEncrypt, cipherDecrypt
// t.Cleanup(func() { cipherEncrypt, cipherDecrypt = origEnc, origDec })
//
// cipherEncrypt = func(
// _ *workloadapi.X509Source, mode cipher.Mode, _ io.Reader,
// _ string, plaintext []byte, algorithm string, _ predicate.Predicate,
// ) ([]byte, error) {
// if mode != cipher.ModeJSON {
// return nil, errors.New("bad mode")
// }
// if string(plaintext) != "p" || algorithm != "alg" {
// return nil, errors.New("bad input")
// }
// return []byte{2}, nil
// }
// cipherDecrypt = func(
// _ *workloadapi.X509Source, mode cipher.Mode, _ io.Reader,
// _ string, version byte, _, _ []byte,
// algorithm string, _ predicate.Predicate,
// ) ([]byte, error) {
// if mode != cipher.ModeJSON {
// return nil, errors.New("bad mode")
// }
// if version != 1 || algorithm != "alg" {
// return nil, errors.New("bad input")
// }
// return []byte("p"), nil
// }
//
// out, err := a.CipherEncrypt([]byte("p"), "alg")
// if err != nil {
// t.Fatalf("CipherEncrypt error: %v", err)
// }
// if len(out) != 1 {
// t.Fatalf("unexpected encrypt json response length: %d", len(out))
// }
//
// outp, err := a.CipherDecrypt(1, []byte{1}, []byte{2}, "alg")
// if err != nil {
// t.Fatalf("CipherDecrypt error: %v", err)
// }
// if string(outp) != "p" {
// t.Fatalf("unexpected decrypt json: %s", string(outp))
// }
//}
|
