@tsmx/secure-config-tool/test/crypt-utils.test.js

Command-line tool for @tsmx/secure-config.

const cryptUtils = require('../utils/crypt');

describe('crypt utils test suite', () => {

    var testOutput = [];
    const originalConsoleLog = console.log;
    const testConsoleLog = (output) => { testOutput.push(output); };

    const TEST_KEY = 'iC771qNLe+OGVcduw8fqpDIIK7lK0T5p';
    const TEST_KEY_HEX = '9af7d400be4705147dc724db25bfd2513aa11d6013d7bf7bdb2bfe050593bd0f';
    const TEST_KEY_BROKEN = 'iC771qNLe+OGVcduw8fqpDIIK7lK0T';
    const TEST_SECRET = 'MySecret123$';
    const TEST_SECRET_ENCRYPTED = 'ENCRYPTED|f43fda7e3486b77a46b77b1c0b35e3db|9d329de17378813ffe21117360dfe3fa';

    beforeEach(() => {
        delete process.env['CONFIG_ENCRYPTION_KEY'];
        jest.resetModules();
        console.log = testConsoleLog;
        testOutput = [];

    });

    afterEach(() => {
        console.log = originalConsoleLog;
    });

    it('tests a successful key generation', () => {
        const hexReg = new RegExp('^[0-9A-F]{64}$', 'i');
        const key = cryptUtils.genkey();
        expect(key).toBeDefined();
        expect(key.length).toBe(64);
        expect(hexReg.test(key)).toBeTruthy();
        expect(Buffer.from(key, 'hex').length).toBe(32);
    });

    it('tests a successful key retrieval', () => {
        process.env[cryptUtils.CONFIG_ENCRYPTION_KEY] = TEST_KEY;
        expect(testOutput.length).toBe(0);
        const key = cryptUtils.retrieveKey(cryptUtils.CONFIG_ENCRYPTION_KEY, true);
        expect(key).toBeDefined();
        expect(key.length).toBe(32);
        expect(testOutput.length).toBe(1);
        expect(testOutput[0].startsWith('CONFIG_ENCRYPTION_KEY found')).toBeTruthy();
        expect(testOutput[0].endsWith('0T5p')).toBeTruthy();
    });

    it('tests a successful key retrieval for a hexadecimal string', () => {
        process.env[cryptUtils.CONFIG_ENCRYPTION_KEY] = TEST_KEY_HEX;
        expect(testOutput.length).toBe(0);
        const key = cryptUtils.retrieveKey(cryptUtils.CONFIG_ENCRYPTION_KEY, true);
        expect(key).toBeDefined();
        expect(key.length).toBe(64);
        expect(testOutput.length).toBe(1);
        expect(testOutput[0].startsWith('CONFIG_ENCRYPTION_KEY found')).toBeTruthy();
        expect(testOutput[0].endsWith('bd0f')).toBeTruthy();
    });

    it('tests a failed key retrieval - no key found', () => {
        expect(() => {
            cryptUtils.retrieveKey(cryptUtils.CONFIG_ENCRYPTION_KEY);
        }).toThrow(`Environment variable ${cryptUtils.CONFIG_ENCRYPTION_KEY} not set.`);
    });

    it('tests a failes key retrieval - invalid key length', () => {
        expect(() => {
            process.env[cryptUtils.CONFIG_ENCRYPTION_KEY] = TEST_KEY_BROKEN;
            cryptUtils.retrieveKey(cryptUtils.CONFIG_ENCRYPTION_KEY);
        }).toThrow(`${cryptUtils.CONFIG_ENCRYPTION_KEY} length must be 32 bytes.`);
    });

    it('tests a successful encryption and decryption', () => {
        const encrypted = cryptUtils.encrypt(TEST_SECRET, TEST_KEY);
        expect(encrypted).toBeDefined();
        let parts = encrypted.split('|');
        expect(parts).toBeDefined();
        expect(parts.length).toBe(3);
        expect(parts[0]).toBe('ENCRYPTED');
        const decrypted = cryptUtils.decrypt(encrypted, TEST_KEY);
        expect(decrypted).toBeDefined();
        expect(decrypted).toStrictEqual(TEST_SECRET);
    });

    it('tests a successful decryption', () => {
        const decrypted = cryptUtils.decrypt(TEST_SECRET_ENCRYPTED, TEST_KEY);
        expect(decrypted).toBeDefined();
        expect(decrypted).toStrictEqual(TEST_SECRET);
    });

    it('tests a failed decryption - illegal secret structure', () => {
        expect(() => {
            const encrypted = '2a8660e3e6614b58b1c1b13d5db49ff0|30d052eeab498181b7071e2d5ce0e71a';
            cryptUtils.decrypt(encrypted, TEST_KEY);
        }).toThrow(cryptUtils.DECRYPTION_ERROR);
    });

    it('tests a failed decryption - illegal secret IV', () => {
        expect(() => {
            const encrypted = 'ENCRYPTED|2a8660e3|30d052eeab498181b7071e2d5ce0e71a';
            cryptUtils.decrypt(encrypted, TEST_KEY);
        }).toThrow(cryptUtils.DECRYPTION_ERROR);
    });

    it('tests a failed decryption - illegal secret data', () => {
        expect(() => {
            const encrypted = 'ENCRYPTED|2a8660e3e6614b58b1c1b13d5db49ff0|30d052eeab498181b7071e2d5ce0';
            cryptUtils.decrypt(encrypted, TEST_KEY);
        }).toThrow(cryptUtils.DECRYPTION_ERROR);
    });

});