kaji 0.0.1

Steer your Keycloak configuration to a stable, declared state.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use kaji::args::Cli;

#[test]
fn test_cli_debug_obfuscation() {
    let cli = Cli {
        command: kaji::args::Commands::Clean {
            workspace: std::path::PathBuf::from("workspace"),
            yes: false,
        },
        server: Some("http://localhost:8080".to_string()),
        realms: vec![],
        user: Some("admin".to_string()),
        password: Some("secret123".to_string()),
        client_id: "admin-cli".to_string(),
        client_secret: Some("secret_client".to_string()),
        profile: None,
        vault_addr: None,
        vault_token: Some("secret_vault".to_string()),
    };

    let debug_str = format!("{:?}", cli);
    assert!(!debug_str.contains("secret123"), "Password was exposed");
    assert!(
        !debug_str.contains("secret_client"),
        "Client secret was exposed"
    );
    assert!(
        !debug_str.contains("secret_vault"),
        "Vault token was exposed"
    );
    assert!(debug_str.contains("********"), "Redaction missing");
    assert!(
        debug_str.contains("http://localhost:8080"),
        "Server was exposed"
    );
}