06bad37c24
- Round-trip, fresh nonce, redaction, previous_keys fallback - LoadAppKey rejects empty/short/undecodable keys - key:generate prints 32-byte base64; DecryptLaravelPayload fixture
22 lines
750 B
Go
22 lines
750 B
Go
package lagoon
|
|
|
|
import (
|
|
"bytes"
|
|
"testing"
|
|
)
|
|
|
|
// Fixture produced by PHP openssl_encrypt AES-256-CBC + HMAC-SHA256 over iv+value,
|
|
// matching Laravel's Encrypter payload (base64 JSON {iv,value,mac}) with serialize=false.
|
|
const laravelTestPayload = "eyJpdiI6IlNVbEpTVWxKU1VsSlNVbEpTVWxKU1E9PSIsInZhbHVlIjoiYVJ6ODYrRitUM25oVFNoR0o5WGMxbUJtSW5DeWdaVWN6WktYR3RFV3liZz0iLCJtYWMiOiI4YmI4NTRmZDk0ZmQ0NDYzNjk3ZDhmYmQ3M2QyNzFhYzI1MGI1YjFhNzk2ZDdiOWVjN2YyYmQ3YzJjOTk4MzBiIn0="
|
|
|
|
func TestEncryptedDecryptLaravelPayload(t *testing.T) {
|
|
key := bytes.Repeat([]byte("K"), 32)
|
|
got, err := DecryptLaravelPayload(laravelTestPayload, key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if string(got) != "sk-test-super-secret-api-key" {
|
|
t.Fatalf("decrypted = %q", got)
|
|
}
|
|
}
|