rejson 0.6.1

A command line utility for managing secrets
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120

use std::fs;

use anyhow::Result;
use assert_cmd::cargo_bin_cmd;
use assert_fs::prelude::*;
use predicates::prelude::*;

const PUB_KEY: &str = "b595226c62427adbfc4a809cd7577488a6d402b2f930e1d603164ae3191a616e";
const PRIV_KEY: &str = "88649a9e83f8f1984ad35ac8e8e86529aab518572c0341f46d1e0bc97f676f2b";

#[test]
fn decrypt() -> Result<()> {
    let key_file = assert_fs::NamedTempFile::new(PUB_KEY)?;
    fs::write(key_file.path(), PRIV_KEY)?;

    let file = assert_fs::NamedTempFile::new("secrets.ejson")?;
    fs::write(
        file.path(),
        serde_json::json!({
            "_public_key": PUB_KEY,
            "some":"EJ[1:l6yw664nxaddSXGiWUZfuVeoUSpTFHzqAyCpfF8Awxc=:xOfucLDkACGlPCyJ6QViggEidVswUlsH:B/f3DJMkdZHF+Wu9F6XUFwuTmxyfBA==]"
        })
        .to_string(),
    )?;

    cargo_bin_cmd!()
        .arg("decrypt")
        .arg(file.path())
        .arg("--keydir")
        .arg(key_file.parent().unwrap())
        .assert()
        .success()
        .stdout(predicates::str::contains(r#""some": "secret""#));

    Ok(())
}

#[test]
fn decrypt_ejson_keydir() -> Result<()> {
    let key_file = assert_fs::NamedTempFile::new(PUB_KEY)?;
    fs::write(key_file.path(), PRIV_KEY)?;

    let file = assert_fs::NamedTempFile::new("secrets.ejson")?;
    fs::write(
        file.path(),
        serde_json::json!({
            "_public_key": PUB_KEY,
            "some":"EJ[1:l6yw664nxaddSXGiWUZfuVeoUSpTFHzqAyCpfF8Awxc=:xOfucLDkACGlPCyJ6QViggEidVswUlsH:B/f3DJMkdZHF+Wu9F6XUFwuTmxyfBA==]"
        })
        .to_string(),
    )?;

    cargo_bin_cmd!()
        .env("EJSON_KEYDIR", key_file.parent().unwrap())
        .arg("decrypt")
        .arg(file.path())
        .assert()
        .success()
        .stdout(predicates::str::contains(r#""some": "secret""#));

    Ok(())
}

#[test]
fn decrypt_key_from_stdin() -> Result<()> {
    let file = assert_fs::NamedTempFile::new("secrets.ejson")?;
    fs::write(
        file.path(),
        serde_json::json!({
            "_public_key": PUB_KEY,
            "some":"EJ[1:l6yw664nxaddSXGiWUZfuVeoUSpTFHzqAyCpfF8Awxc=:xOfucLDkACGlPCyJ6QViggEidVswUlsH:B/f3DJMkdZHF+Wu9F6XUFwuTmxyfBA==]"
        })
        .to_string(),
    )?;

    cargo_bin_cmd!()
        .arg("decrypt")
        .arg(file.path())
        .arg("--key-from-stdin")
        .write_stdin(PRIV_KEY)
        .assert()
        .success()
        .stdout(predicates::str::contains(r#""some": "secret""#));

    Ok(())
}

#[test]
fn decrypt_to_file() -> Result<()> {
    let file = assert_fs::NamedTempFile::new("secrets.ejson")?;
    let out_file = assert_fs::NamedTempFile::new("secrets.json")?;

    fs::write(
        file.path(),
        serde_json::json!({
            "_public_key": PUB_KEY,
            "some":"EJ[1:l6yw664nxaddSXGiWUZfuVeoUSpTFHzqAyCpfF8Awxc=:xOfucLDkACGlPCyJ6QViggEidVswUlsH:B/f3DJMkdZHF+Wu9F6XUFwuTmxyfBA==]"
        })
        .to_string(),
    )?;

    cargo_bin_cmd!()
        .arg("decrypt")
        .arg(file.path())
        .arg("--key-from-stdin")
        .arg("--strip-key")
        .arg("--out")
        .arg(out_file.path())
        .write_stdin(PRIV_KEY)
        .assert()
        .success();

    // decrypted file is decrypted
    out_file.assert(predicates::str::contains(r#""some": "secret""#));

    // doesn't include _public_key
    out_file.assert(predicates::str::contains("_public_key").not());

    Ok(())
}