dnsync 0.2.2

DNS Sync and Control with MCP
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

use serde_json::Value;

use crate::core::{dns::service::SettingsRead, error::Result, redaction::redact_sensitive_fields};

/// Get DNS server settings through a vendor-neutral settings reader.
///
/// # Errors
///
/// Returns any error reported by the selected DNS backend.
pub async fn get_settings<C: SettingsRead + ?Sized>(client: &C) -> Result<Value> {
    client.get_settings().await.map(redact_sensitive_fields)
}

/// Get DNS server settings without redacting sensitive fields.
///
/// Use only for explicit user-facing opt-in paths.
///
/// # Errors
///
/// Returns any error reported by the selected DNS backend.
pub async fn get_settings_unredacted<C: SettingsRead + ?Sized>(client: &C) -> Result<Value> {
    client.get_settings().await
}

#[cfg(test)]
mod tests {
    use serde_json::{Value, json};

    use super::*;
    use crate::core::{error::Result, redaction::REDACTED_MARKER};

    struct FakeSettingsRead {
        settings: Value,
    }

    impl SettingsRead for FakeSettingsRead {
        async fn get_settings(&self) -> Result<Value> {
            Ok(self.settings.clone())
        }
    }

    #[tokio::test]
    async fn get_settings_redacts_before_returning() {
        let client = FakeSettingsRead {
            settings: json!({
                "version": "13.4.1",
                "tsigKeys": [{ "sharedSecret": "actual-secret" }]
            }),
        };

        let settings = get_settings(&client).await.unwrap();

        assert_eq!(settings["version"], "13.4.1");
        assert_eq!(settings["tsigKeys"][0]["sharedSecret"], REDACTED_MARKER);
    }

    #[tokio::test]
    async fn get_settings_unredacted_preserves_secret_values() {
        let client = FakeSettingsRead {
            settings: json!({
                "version": "13.4.1",
                "tsigKeys": [{ "sharedSecret": "actual-secret" }]
            }),
        };

        let settings = get_settings_unredacted(&client).await.unwrap();

        assert_eq!(settings["version"], "13.4.1");
        assert_eq!(settings["tsigKeys"][0]["sharedSecret"], "actual-secret");
    }
}