Function vault_auth_error_path

nodedb/src/control/security/keystore/vault.rs:326–351

()

    #[tokio::test]
    #[cfg(unix)]
    async fn vault_auth_error_path() {
        let port = 18202u16;
        let _srv = spawn_mock_vault(port);
        tokio::time::sleep(std::time::Duration::from_millis(50)).await;

        let dir = tempfile::tempdir().unwrap();
        let token_path = dir.path().join("token");
        let blob_path = dir.path().join("blob");
        write_secure(&token_path, b"bad-token");
        write_secure(&blob_path, b"vault:v1:cipher==");

        let provider = VaultKeyProvider::new(
            format!("http://127.0.0.1:{port}"),
            token_path,
            "badkey".into(),
            "transit".into(),
            blob_path,
        );

        let err = provider.unwrap_key().await.unwrap_err();
        let detail = format!("{err:?}");
        assert!(
            detail.contains("403") || detail.contains("permission"),
            "expected auth error, got: {detail}"
        );
    }

    #[tokio::test]
    #[cfg(unix)]