35 lines
1.4 KiB
TypeScript
35 lines
1.4 KiB
TypeScript
import { strict as assert } from "node:assert";
|
|
import test from "node:test";
|
|
import { encryptConfig, decryptConfig, isEncryptedConfig } from "../src/lib/configCrypto.ts";
|
|
|
|
test("encrypts and decrypts config round-trip", async () => {
|
|
const original = JSON.stringify([{ id: "1", name: "test", password: "secret123" }]);
|
|
const encrypted = await encryptConfig(original, "my-passphrase");
|
|
|
|
assert.equal(encrypted.format, "dbx-encrypted");
|
|
assert.equal(encrypted.version, 1);
|
|
assert.ok(encrypted.salt);
|
|
assert.ok(encrypted.iv);
|
|
assert.ok(encrypted.data);
|
|
|
|
const decrypted = await decryptConfig(encrypted, "my-passphrase");
|
|
assert.equal(decrypted, original);
|
|
});
|
|
|
|
test("fails to decrypt with wrong passphrase", async () => {
|
|
const encrypted = await encryptConfig('{"test":true}', "correct-passphrase");
|
|
|
|
await assert.rejects(
|
|
() => decryptConfig(encrypted, "wrong-passphrase"),
|
|
(err: Error) => err.message === "wrong_passphrase",
|
|
);
|
|
});
|
|
|
|
test("detects encrypted config format", () => {
|
|
assert.equal(isEncryptedConfig({ format: "dbx-encrypted", version: 1, salt: "a", iv: "b", data: "c" }), true);
|
|
assert.equal(isEncryptedConfig({ format: "dbx-config", version: 1, connections: [] }), false);
|
|
assert.equal(isEncryptedConfig([{ id: "1" }]), false);
|
|
assert.equal(isEncryptedConfig(null), false);
|
|
assert.equal(isEncryptedConfig("string"), false);
|
|
});
|