Function TestResolveSecretValueForSet

pkg/cli/secret_set_command_test.go:15–66

(t *testing.T)

)

func TestResolveSecretValueForSet(t *testing.T) {
	tests := []struct {
		name        string
		fromEnv     string
		fromFlag    string
		envValue    string
		wantErr     bool
		wantValue   string
		errContains string
	}{
		{
			name:      "from flag",
			fromFlag:  "secret123",
			wantValue: "secret123",
		},
		{
			name:      "from env var - set",
			fromEnv:   "TEST_SECRET",
			envValue:  "envvalue123",
			wantValue: "envvalue123",
		},
		{
			name:        "from env var - empty",
			fromEnv:     "TEST_SECRET_MISSING",
			wantErr:     true,
			errContains: "not set or empty",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			// Set up environment
			if tt.envValue != "" {
				t.Setenv(tt.fromEnv, tt.envValue)
			}

			got, err := resolveSecretValueForSet(tt.fromEnv, tt.fromFlag)
			if (err != nil) != tt.wantErr {
				t.Errorf("resolveSecretValueForSet() error = %v, wantErr %v", err, tt.wantErr)
				return
			}
			if tt.wantErr && tt.errContains != "" {
				if err == nil || !strings.Contains(err.Error(), tt.errContains) {
					t.Errorf("expected error containing %q, got %v", tt.errContains, err)
				}
			}
			if !tt.wantErr && got != tt.wantValue {
				t.Errorf("resolveSecretValueForSet() = %v, want %v", got, tt.wantValue)
			}
		})
	}
}

func TestEncryptWithPublicKey(t *testing.T) {
	// Valid 32-byte public key in base64