auths-sdk 0.0.1-rc.10

Application services layer for Auths identity operations
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109

use auths_sdk::ports::git::{CommitRecord, SignatureStatus};
use auths_sdk::testing::fakes::FakeGitLogProvider;
use auths_sdk::workflows::audit::AuditWorkflow;

fn make_commit(hash: &str, status: SignatureStatus) -> CommitRecord {
    CommitRecord {
        hash: hash.to_string(),
        author_name: "Test Author".to_string(),
        author_email: "test@example.com".to_string(),
        timestamp: "2024-01-15T10:00:00+00:00".to_string(),
        message: "test commit".to_string(),
        signature_status: status,
    }
}

#[test]
fn test_audit_empty_repo() {
    let provider = FakeGitLogProvider::with_commits(vec![]);
    let workflow = AuditWorkflow::new(&provider);
    let report = workflow.generate_report(None, None).unwrap();

    assert_eq!(report.summary.total_commits, 0);
    assert_eq!(report.summary.signed_commits, 0);
    assert_eq!(report.summary.unsigned_commits, 0);
    assert!(report.commits.is_empty());
}

#[test]
fn test_audit_all_signed() {
    let provider = FakeGitLogProvider::with_commits(vec![
        make_commit(
            "abc1234",
            SignatureStatus::AuthsSigned {
                signer_did: "did:keri:abc".to_string(),
            },
        ),
        make_commit("def5678", SignatureStatus::GpgSigned { verified: true }),
        make_commit("ghi9012", SignatureStatus::SshSigned),
    ]);
    let workflow = AuditWorkflow::new(&provider);
    let report = workflow.generate_report(None, None).unwrap();

    assert_eq!(report.summary.total_commits, 3);
    assert_eq!(report.summary.signed_commits, 3);
    assert_eq!(report.summary.unsigned_commits, 0);
    assert_eq!(report.summary.auths_signed, 1);
    assert_eq!(report.summary.gpg_signed, 1);
    assert_eq!(report.summary.ssh_signed, 1);
    assert_eq!(report.summary.verification_passed, 2);
}

#[test]
fn test_audit_mixed_signatures() {
    let provider = FakeGitLogProvider::with_commits(vec![
        make_commit(
            "abc1234",
            SignatureStatus::AuthsSigned {
                signer_did: "did:keri:abc".to_string(),
            },
        ),
        make_commit("def5678", SignatureStatus::Unsigned),
        make_commit("ghi9012", SignatureStatus::GpgSigned { verified: false }),
        make_commit(
            "jkl3456",
            SignatureStatus::InvalidSignature {
                reason: "corrupt".to_string(),
            },
        ),
    ]);
    let workflow = AuditWorkflow::new(&provider);
    let report = workflow.generate_report(None, None).unwrap();

    assert_eq!(report.summary.total_commits, 4);
    assert_eq!(report.summary.signed_commits, 3);
    assert_eq!(report.summary.unsigned_commits, 1);
    assert_eq!(report.summary.verification_failed, 2);
    assert_eq!(report.summary.auths_signed, 1);
    assert_eq!(report.summary.gpg_signed, 1);
    assert_eq!(report.summary.verification_passed, 1);
}

#[test]
fn test_audit_lock_poisoned() {
    let provider = FakeGitLogProvider::poisoned();
    let workflow = AuditWorkflow::new(&provider);
    let result = workflow.generate_report(None, None);

    assert!(result.is_err());
    let err = result.unwrap_err();
    assert!(
        err.to_string().contains("lock poisoned"),
        "expected LockPoisoned error, got: {}",
        err
    );
}

#[test]
fn test_audit_respects_limit() {
    let provider = FakeGitLogProvider::with_commits(vec![
        make_commit("abc1234", SignatureStatus::Unsigned),
        make_commit("def5678", SignatureStatus::Unsigned),
        make_commit("ghi9012", SignatureStatus::Unsigned),
    ]);
    let workflow = AuditWorkflow::new(&provider);
    let report = workflow.generate_report(None, Some(2)).unwrap();

    assert_eq!(report.commits.len(), 2);
    assert_eq!(report.summary.total_commits, 2);
}