vinz/tests/cli-test.js

Enables secure storage of credentials right in your repo using AWS KMS.

import prompt from 'prompt';
import commander from 'commander';
import AWSWithConfig from '../src/lib/aws-config';
import kms from '../src/lib/aws-kms';
import { prepSecretDir } from '../src/lib/io';

jest.unmock('../src/cli');
import CLI from '../src/cli';

describe('CLI', () => {
  const cli = new CLI();

  describe('parse', () => {
    it('starts up a Commander interface', () => {
      spyOn(console, 'error');

      process.argv = ['foo', 'bar'];

      cli.parse();

      expect(commander.version).toBeCalled();

      const options = ['-p', '-a', '-s', '-r', '-e'];

      expect(commander.option.mock.calls.length).toBe(options.length);
      options.forEach((option, i) => {
        expect(commander.option.mock.calls[i]).toMatch(option);
      });

      expect(commander.parse).lastCalledWith(['foo', 'bar']);
    });

    it('displays an error if nothing is set', () => {
      console.error = jest.fn();

      cli.parse();

      expect(console.error).toBeCalled();
      expect(console.error.mock.calls[0]).toMatch('No arguments passed.');
    });

    it('calls encryptByCLI if commander.encrypt is set', () => {
      commander.encrypt = true;

      spyOn(cli, 'encryptByCLI');
      cli.parse();

      expect(cli.encryptByCLI).toBeCalled();
    });

    it('passes secret keys to encryptByCLI if provided', () => {
      commander.accessKeyId = 'bar';
      commander.secretAccessKey = 'bizz';
      commander.region = 'us-east-1';
      commander.encrypt = true;

      spyOn(cli, 'encryptByCLI');
      cli.parse();

      expect(cli.encryptByCLI).lastCalledWith(jasmine.objectContaining({
        accessKeyId: 'bar',
        secretAccessKey: 'bizz',
        region: 'us-east-1'
      }));
    });
  });

  describe('encryptByCLI', () => {
    it('calls prepSecretDir', () => {
      cli.encryptByCLI();
      expect(prepSecretDir).toBeCalled();
    });

    it('creates a new AWSWithConfig', () => {
      const accessKeyId = 'accessKeyId';
      const secretAccessKey = 'secretAccessKey';
      const region = 'us-east-1';
      const profile = 'profile';
      const params = {
        accessKeyId,
        secretAccessKey,
        region,
        profile
      };
      cli.encryptByCLI(params);
      expect(AWSWithConfig).lastCalledWith(accessKeyId, secretAccessKey, region, profile);
    });

    it('prompts for secret value', () => {
      cli.encryptByCLI({ encrypt: 'FooBar' });
      expect(prompt.get).lastCalledWith({
        properties: {
          secretValue: {
            required: true,
            description: "Enter the secret to encrypt as 'FooBar'. (typing hidden)",
            hidden: true
          }
        }
      }, jasmine.any(Function));
    });

    it('calls encryptAndStore after the prompt gets input', () => {
      cli.encryptByCLI({ encrypt: 'FooBar' });
      expect(kms.encryptAndStore).lastCalledWith(undefined, 'FooBar', 'secretValue');
    });

    it('throws any error from prompt', () => {
      prompt.get.mockImplementationOnce((params, cb) => {
        cb('error from prompt');
      });
      expect(() => cli.encryptByCLI()).toThrow(new Error('error from prompt'));
    });
  });
});