auths-cli 0.1.3

Command-line interface for Auths decentralized identity system
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

use super::helpers::TestEnv;

#[test]
fn test_sign_verify_roundtrip() {
    let env = TestEnv::new();
    env.init_identity();

    // Create a test file and make a signed commit
    std::fs::write(env.repo_path.join("test.txt"), "hello world").unwrap();

    let add_output = env.git_cmd().args(["add", "test.txt"]).output().unwrap();
    assert!(add_output.status.success(), "git add failed");

    let commit_output = env
        .git_cmd()
        .args(["commit", "-m", "signed test commit"])
        .output()
        .unwrap();
    assert!(
        commit_output.status.success(),
        "git commit failed: {}",
        String::from_utf8_lossy(&commit_output.stderr)
    );

    // Write the in-band Auths-Id / Auths-Device trailers that KEL-native verify reads.
    let sign_output = env.cmd("auths").args(["sign", "HEAD"]).output().unwrap();
    assert!(
        sign_output.status.success(),
        "auths sign failed: {}",
        String::from_utf8_lossy(&sign_output.stderr)
    );

    // Verify the commit by KEL replay (no allowlist, no ssh-keygen).
    let output = env.cmd("auths").args(["verify", "HEAD"]).output().unwrap();
    assert!(
        output.status.success(),
        "verify should succeed, stderr: {}",
        String::from_utf8_lossy(&output.stderr)
    );

    // Verify JSON output
    let json_output = env
        .cmd("auths")
        .args(["verify", "HEAD", "--json"])
        .output()
        .unwrap();
    assert!(json_output.status.success());
    let stdout = String::from_utf8_lossy(&json_output.stdout);
    let result: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(result["valid"], true);
}

#[test]
fn test_verify_unsigned_commit_fails() {
    let env = TestEnv::new();
    env.init_identity();

    // Disable signing for this commit
    let _ = env
        .git_cmd()
        .args(["config", "--local", "commit.gpgsign", "false"])
        .output()
        .unwrap();

    std::fs::write(env.repo_path.join("unsigned.txt"), "no signature").unwrap();
    let add = env
        .git_cmd()
        .args(["add", "unsigned.txt"])
        .output()
        .unwrap();
    assert!(add.status.success());

    let commit = env
        .git_cmd()
        .args(["commit", "-m", "unsigned commit"])
        .output()
        .unwrap();
    assert!(commit.status.success());

    // Re-enable signing for future commits (not needed, but clean)
    let _ = env
        .git_cmd()
        .args(["config", "--local", "--unset", "commit.gpgsign"])
        .output();

    let output = env.cmd("auths").args(["verify", "HEAD"]).output().unwrap();
    assert!(
        !output.status.success(),
        "verify should fail for unsigned commit"
    );
}