85 lines
3.2 KiB
JavaScript
85 lines
3.2 KiB
JavaScript
import test from "ava";
|
|
import { repeat } from "lodash-es";
|
|
import hideSensitive from "../lib/hide-sensitive.js";
|
|
import { SECRET_MIN_SIZE, SECRET_REPLACEMENT } from "../lib/definitions/constants.js";
|
|
|
|
test("Replace multiple sensitive environment variable values", (t) => {
|
|
const env = { SOME_PASSWORD: "password", SOME_TOKEN: "secret" };
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.SOME_PASSWORD}@host.com?token=${env.SOME_TOKEN}`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|
|
|
|
test("Replace multiple occurrences of sensitive environment variable values", (t) => {
|
|
const env = { secretKey: "secret" };
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.secretKey}@host.com?token=${env.secretKey}`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|
|
|
|
test('Replace sensitive environment variable matching specific regex for "private"', (t) => {
|
|
const env = { privateKey: "secret", GOPRIVATE: "host.com" };
|
|
t.is(hideSensitive(env)(`https://host.com?token=${env.privateKey}`), `https://host.com?token=${SECRET_REPLACEMENT}`);
|
|
});
|
|
|
|
test("Replace url-encoded environment variable", (t) => {
|
|
const env = { privateKey: "secret " };
|
|
t.is(
|
|
hideSensitive(env)(`https://host.com?token=${encodeURI(env.privateKey)}`),
|
|
`https://host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|
|
|
|
test("Escape regexp special characters", (t) => {
|
|
const env = { SOME_CREDENTIALS: "p$^{.+}\\w[a-z]o.*rd" };
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.SOME_CREDENTIALS}@host.com`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com`
|
|
);
|
|
});
|
|
|
|
test("Escape regexp special characters in url-encoded environment variable", (t) => {
|
|
const env = { SOME_PASSWORD: "secret password p$^{.+}\\w[a-z]o.*rd)(" };
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${encodeURI(env.SOME_PASSWORD)}@host.com`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com`
|
|
);
|
|
});
|
|
|
|
test('Accept "undefined" input', (t) => {
|
|
t.is(hideSensitive({})(), undefined);
|
|
});
|
|
|
|
test("Return same string if no environment variable has to be replaced", (t) => {
|
|
t.is(hideSensitive({})("test"), "test");
|
|
});
|
|
|
|
test("Exclude empty environment variables from the regexp", (t) => {
|
|
const env = { SOME_PASSWORD: "password", SOME_TOKEN: "" };
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.SOME_PASSWORD}@host.com?token=`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com?token=`
|
|
);
|
|
});
|
|
|
|
test("Exclude empty environment variables from the regexp if there is only empty ones", (t) => {
|
|
t.is(hideSensitive({ SOME_PASSWORD: "", SOME_TOKEN: " \n " })(`https://host.com?token=`), "https://host.com?token=");
|
|
});
|
|
|
|
test("Exclude nonsensitive GOPRIVATE environment variable for Golang projects from the regexp", (t) => {
|
|
const env = { GOPRIVATE: "host.com" };
|
|
t.is(hideSensitive(env)(`https://host.com?token=`), "https://host.com?token=");
|
|
});
|
|
|
|
test("Exclude environment variables with value shorter than SECRET_MIN_SIZE from the regexp", (t) => {
|
|
const SHORT_TOKEN = repeat("a", SECRET_MIN_SIZE - 1);
|
|
const LONG_TOKEN = repeat("b", SECRET_MIN_SIZE);
|
|
const env = { SHORT_TOKEN, LONG_TOKEN };
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${SHORT_TOKEN}@host.com?token=${LONG_TOKEN}`),
|
|
`https://user:${SHORT_TOKEN}@host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|