Function TestEncryptWithPublicKeyInvalidKey

pkg/cli/secret_set_command_test.go:88–120

(t *testing.T)

}

func TestEncryptWithPublicKeyInvalidKey(t *testing.T) {
	tests := []struct {
		name        string
		key         string
		plaintext   string
		errContains string
	}{
		{
			name:        "invalid base64",
			key:         "not-valid-base64!@#$",
			plaintext:   "secret",
			errContains: "decode public key",
		},
		{
			name:        "wrong key length",
			key:         "YWJjZA==", // "abcd" in base64 = 4 bytes, not 32
			plaintext:   "secret",
			errContains: "unexpected public key length",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			_, err := encryptWithPublicKey(tt.key, tt.plaintext)
			if err == nil {
				t.Fatal("encryptWithPublicKey() expected error, got nil")
			}
			if !strings.Contains(err.Error(), tt.errContains) {
				t.Errorf("expected error containing %q, got %v", tt.errContains, err)
			}
		})
	}
}

func TestEncryptWithPublicKeyEmptyPlaintext(t *testing.T) {
	validKey := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUY="