auths-cli 0.1.7

Command-line interface for Auths decentralized identity system
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

#![allow(deprecated)] // cargo_bin is deprecated but replacement requires significant refactor

use assert_cmd::Command;

#[test]
fn test_verify_commit_help_shows_usage() {
    // verify-commit is now `auths commit verify`
    let mut cmd = Command::cargo_bin("auths").unwrap();
    cmd.arg("commit").arg("verify").arg("--help");

    cmd.assert()
        .success()
        .stdout(predicates::str::contains("commit"));
}

#[test]
fn test_verify_commit_invalid_commit_ref_returns_error() {
    // An unresolvable commit ref is an error (exit code 2), independent of any trust state.
    let mut cmd = Command::cargo_bin("auths").unwrap();
    cmd.arg("commit")
        .arg("verify")
        .arg("invalid-commit-ref-that-does-not-exist");

    cmd.assert().code(2);
}

#[test]
fn test_verify_commit_json_output_error() {
    let mut cmd = Command::cargo_bin("auths").unwrap();
    cmd.arg("commit")
        .arg("verify")
        .arg("invalid-commit-ref-that-does-not-exist")
        .arg("--json");

    let output = cmd.output().unwrap();
    assert_eq!(output.status.code(), Some(2));

    let stdout = String::from_utf8(output.stdout).unwrap();
    let result: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(result["valid"], false);
    assert!(result["error"].is_string());
}

// Tests for the unified `auths verify` command routing to commit verification
#[test]
fn test_unified_verify_routes_head_to_commit_verify() {
    // `auths verify HEAD` routes to commit verification. The VERDICT depends on the
    // checkout this test runs in: an unsigned or untrusted HEAD fails, while a fully
    // signed, root-pinned checkout (CI on main, now that every commit is signed)
    // legitimately succeeds. Routing is what this test pins: either verdict exits
    // 0 or 1 — never clap's usage-error exit 2.
    let mut cmd = Command::cargo_bin("auths").unwrap();
    cmd.arg("verify").arg("HEAD");

    let output = cmd.output().unwrap();
    let code = output.status.code().unwrap_or(-1);
    assert!(
        code == 0 || code == 1,
        "verify HEAD must route to commit verification (exit {code}; 2 = clap parse error)"
    );
}