doby/tests/cli.rs

use std::{io::{self, Read, Write}, fs::{self, File, create_dir}, path::PathBuf};
use assert_cmd::{Command, cargo::{CargoError, cargo_bin}};
use tempfile::TempDir;
use doby::crypto::CipherAlgorithm;

const PLAINTEXT: &[u8] = b"the plaintext";
const PASSWORD: &str = "the password";

fn setup_files<'a>() -> io::Result<(PathBuf, PathBuf, PathBuf)> {
    let tmp_dir = TempDir::new()?;
    let tmp_path = PathBuf::from(tmp_dir.path());
    drop(tmp_dir);
    create_dir(&tmp_path)?;

    let tmp_plaintext = tmp_path.join("plaintext");
    let tmp_ciphertext = tmp_path.join("ciphertext");

    File::create(&tmp_plaintext)?.write_all(PLAINTEXT)?;

    Ok((tmp_path, tmp_plaintext, tmp_ciphertext))
}

fn doby_cmd() -> Result<Command, CargoError> {
    let mut cmd = Command::cargo_bin("doby")?;
    cmd.arg("-p").arg(PASSWORD);
    Ok(cmd)
}

fn bash_cmd() -> Command {
    let mut cmd = Command::new("bash");
    cmd.arg("-c");
    cmd
}

#[test]
fn files() -> io::Result<()> {
    let (tmp_path, tmp_plaintext, tmp_ciphertext) = setup_files()?;

    doby_cmd().unwrap().arg(tmp_plaintext).arg(&tmp_ciphertext).assert().success().stdout("").stderr("");

    let tmp_decrypted = tmp_path.join("decrypted");
    doby_cmd().unwrap().arg(tmp_ciphertext).arg(&tmp_decrypted).assert().success().stdout("").stderr("");

    let mut buff = [0; PLAINTEXT.len()];
    assert_eq!(File::open(tmp_decrypted)?.read(&mut buff)?, PLAINTEXT.len());
    assert_eq!(buff, PLAINTEXT);

    Ok(())
}

#[test]
fn stdout() -> io::Result<()> {
    let (_, tmp_plaintext, tmp_ciphertext) = setup_files()?;
    
    let shell_cmd = format!("{} -p \"{}\" {} > {}", cargo_bin("doby").to_str().unwrap(), PASSWORD, tmp_plaintext.to_str().unwrap(), tmp_ciphertext.to_str().unwrap());
    bash_cmd().arg(shell_cmd).assert().success().stdout("").stderr("");
    
    doby_cmd().unwrap().arg(tmp_ciphertext).assert().success().stdout(PLAINTEXT);

    Ok(())
}

#[test]
fn stdin() -> io::Result<()> {
    let (_, tmp_plaintext, tmp_ciphertext) = setup_files()?;

    let mut shell_cmd = format!("cat {} | {} -p \"{}\" - {}", tmp_plaintext.to_str().unwrap(), cargo_bin("doby").to_str().unwrap(), PASSWORD, tmp_ciphertext.to_str().unwrap());
    bash_cmd().arg(shell_cmd).assert().success().stdout("").stderr("");

    shell_cmd = format!("cat {} | {} -p \"{}\"", tmp_ciphertext.to_str().unwrap(), cargo_bin("doby").to_str().unwrap(), PASSWORD);
    bash_cmd().arg(shell_cmd).assert().success().stdout(PLAINTEXT);

    Ok(())
}

#[test]
fn force_encrypt() -> io::Result<()> {
    let (tmp_path, tmp_plaintext, tmp_ciphertext_1) = setup_files()?;

    doby_cmd().unwrap().arg(tmp_plaintext).arg(&tmp_ciphertext_1).assert().success().stdout("").stderr("");

    let tmp_ciphertext_2 = tmp_path.join("ciphertext_2");
    doby_cmd().unwrap().arg("-f").arg(&tmp_ciphertext_1).arg(&tmp_ciphertext_2).assert().success().stdout("").stderr("");
    let buff_ciphertext_1 = fs::read(tmp_ciphertext_1)?;
    let buff_ciphertext_2 = fs::read(&tmp_ciphertext_2)?;
    assert_ne!(buff_ciphertext_1, buff_ciphertext_2);
    assert_ne!(buff_ciphertext_2, PLAINTEXT);
    assert!(buff_ciphertext_2.len() >= buff_ciphertext_1.len()+190);

    let tmp_decrypted_1 = tmp_path.join("decrypted_1");
    doby_cmd().unwrap().arg(tmp_ciphertext_2).arg(&tmp_decrypted_1).assert().success().stdout("").stderr("");
    let buff_decrypted_1 = fs::read(&tmp_decrypted_1)?;
    assert_eq!(buff_decrypted_1, buff_ciphertext_1);
    assert_ne!(buff_decrypted_1, PLAINTEXT);

    let tmp_decrypted_2 = tmp_path.join("decrypted_2");
    doby_cmd().unwrap().arg(tmp_decrypted_1).arg(&tmp_decrypted_2).assert().success().stdout("").stderr("");
    let buff_decrypted_2 = fs::read(tmp_decrypted_2)?;
    assert_eq!(buff_decrypted_2, PLAINTEXT);

    Ok(())
}

fn test_cipher(cipher_str: &str, cipher_algorithm: CipherAlgorithm) -> io::Result<()> {
    let (_, tmp_plaintext, tmp_ciphertext) = setup_files()?;

    doby_cmd().unwrap().arg("-c").arg(cipher_str).arg(tmp_plaintext).arg(&tmp_ciphertext).assert().success().stdout("").stderr("");

    let ciphertext = fs::read(&tmp_ciphertext)?;
    assert_eq!(ciphertext[4+64*2+4*2+1], cipher_algorithm as u8);
    assert_eq!(ciphertext.len(), PLAINTEXT.len()+174+cipher_algorithm.get_nonce_size());

    doby_cmd().unwrap().arg(tmp_ciphertext).assert().success().stdout(PLAINTEXT).stderr("");

    Ok(())
}

#[test]
fn xchacha20_cipher() -> io::Result<()> {
    test_cipher("xchacha20", CipherAlgorithm::XChaCha20)?;
    Ok(())
}

#[test]
fn aes_cipher() -> io::Result<()> {
    test_cipher("aes", CipherAlgorithm::AesCtr)?;
    Ok(())
}


#[test]
fn argon2_params() -> io::Result<()> {
    Command::cargo_bin("doby").unwrap().arg("-i").arg("0").assert().failure().stderr("Invalid argon2 params: time cost is too small\n");
    Command::cargo_bin("doby").unwrap().arg("-m").arg("0").assert().failure().stderr("Invalid argon2 params: memory cost is too small\n");
    Command::cargo_bin("doby").unwrap().arg("-t").arg("0").assert().failure().stderr("Invalid argon2 params: too few lanes\n");
    Ok(())
}