fnox 1.25.1

A flexible secret management tool supporting multiple providers and encryption methods
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

#!/usr/bin/env bats
# Test helpful error messages with suggestions

setup() {
	load 'test_helper/common_setup'
	_common_setup
}

teardown() {
	_common_teardown
}

# ============================================================================
# Secret not found with suggestions
# ============================================================================

@test "get: suggests similar secret names for typos" {
	# Set up a secret
	fnox init --force
	fnox set DATABASE_URL "postgresql://localhost/db"

	# Try to get with a typo
	run fnox get DATABSE_URL # Missing 'A'
	[ "$status" -ne 0 ]
	[[ $output =~ "Did you mean 'DATABASE_URL'?" ]]
}

@test "get: suggests multiple similar secret names" {
	fnox init --force
	fnox set DATABASE_URL "postgresql://localhost/db"
	fnox set DATABASE_URI "postgresql://localhost/db2"
	fnox set DATABASE_HOST "localhost"

	# Try to get with something that matches multiple
	run fnox get DATABSE # Partial match
	[ "$status" -ne 0 ]
	# Should suggest at least one of the similar names
	[[ $output =~ "Did you mean" ]]
}

@test "get: no suggestion for completely different name" {
	fnox init --force
	fnox set DATABASE_URL "postgresql://localhost/db"

	# Try to get something completely different
	run fnox get COMPLETELY_UNRELATED_NAME
	[ "$status" -ne 0 ]
	# Should not have "Did you mean" since nothing is similar
	[[ ! $output =~ "Did you mean" ]]
}

# ============================================================================
# Provider not configured with suggestions
# ============================================================================

@test "get: suggests similar provider names for typos" {
	fnox init --force

	# Set up a provider
	cat >fnox.toml <<'EOF'
[providers]
onepassword = { type = "1password", vault = "test" }

[secrets]
MY_SECRET = { provider = "onepasswrd", value = "item" }
EOF

	# Try to get the secret (provider name has typo)
	run fnox get MY_SECRET
	[ "$status" -ne 0 ]
	[[ $output =~ "Did you mean 'onepassword'?" ]]
}

@test "get: suggests provider when using bitwarden typo" {
	fnox init --force

	cat >fnox.toml <<'EOF'
[providers]
bitwarden = { type = "bitwarden" }

[secrets]
MY_SECRET = { provider = "bitwrden", value = "test" }
EOF

	run fnox get MY_SECRET
	[ "$status" -ne 0 ]
	[[ $output =~ "Did you mean 'bitwarden'?" ]]
}

# ============================================================================
# Case insensitive matching
# ============================================================================

@test "get: suggestions are case-insensitive" {
	fnox init --force
	fnox set API_KEY "secret123"

	# Try to get with wrong case
	run fnox get api_key
	[ "$status" -ne 0 ]
	[[ $output =~ "Did you mean 'API_KEY'?" ]]
}