encryptiontest

package

v0.1.100 Latest Latest Go to latest Published: Oct 7, 2026 License: MIT Imports: 8 Imported by: 0

Details

Package encryptiontest provides an in-memory key store and ready Boxes for tests of stores that seal secrets.

View Source

const Key = "test-encryption-key"

Key is the GOMODEL_ENCRYPTION_KEY the helpers use.

View Source

var ErrListFailed = errors.New("encryption_keys is unavailable")

ErrListFailed is what List returns while FailLists is in effect.

func Rotate(t testing.TB, store *KeyStore) *encryption.Box

Rotate creates and activates a new data key in store and returns the Box that seals with it while still opening values of the older keys.

type KeyStore struct {
	// contains filtered or unexported fields
}

KeyStore is an in-memory encryption.KeyStore.

func NewBox(t testing.TB) (*encryption.Box, *KeyStore)

NewBox returns an enabled Box over a fresh in-memory key store, together with the store so a test can rotate the data key.

func NewKeyStore() *KeyStore

NewKeyStore returns an empty in-memory key store.

func (s *KeyStore) Activate(_ context.Context, id string) error

func (s *KeyStore) FailLists(n int)

FailLists makes the next n calls to List fail with ErrListFailed.

func (s *KeyStore) Insert(_ context.Context, key encryption.Key) (bool, error)

func (s *KeyStore) List(context.Context) ([]encryption.Key, error)

func (s *KeyStore) UpdateWrapping(_ context.Context, key encryption.Key) error