# frozen_string_literal: true require "isolation/abstract_unit" require "env_helpers" require "rails/command" require "rails/commands/credentials/credentials_command" class Rails::Command::CredentialsCommandTest < ActiveSupport::TestCase include ActiveSupport::Testing::Isolation, EnvHelpers setup { build_app } teardown { teardown_app } test "edit without editor gives hint" do run_edit_command(editor: "").tap do |output| assert_match "No $EDITOR to open file in", output assert_match "rails credentials:edit", output end end test "edit credentials" do # Run twice to ensure credentials can be reread after first edit pass. 2.times do assert_match(/access_key_id: 123/, run_edit_command) end end test "edit command does not add master key to gitignore when already exist" do run_edit_command Dir.chdir(app_path) do gitignore = File.read(".gitignore") assert_equal 1, gitignore.scan(%r|config/master\.key|).length end end test "edit command does not overwrite by default if credentials already exists" do run_edit_command(editor: "eval echo api_key: abc >") assert_match(/api_key: abc/, run_show_command) run_edit_command assert_match(/api_key: abc/, run_show_command) end test "edit command does not add master key when `RAILS_MASTER_KEY` env specified" do Dir.chdir(app_path) do key = IO.binread("config/master.key").strip FileUtils.rm("config/master.key") switch_env("RAILS_MASTER_KEY", key) do assert_match(/access_key_id: 123/, run_edit_command) assert_not File.exist?("config/master.key") end end end test "edit command modifies file specified by environment option" do assert_match(/access_key_id: 123/, run_edit_command(environment: "production")) Dir.chdir(app_path) do assert File.exist?("config/credentials/production.key") assert File.exist?("config/credentials/production.yml.enc") end end test "show credentials" do assert_match(/access_key_id: 123/, run_show_command) end test "show command raise error when require_master_key is specified and key does not exist" do remove_file "config/master.key" add_to_config "config.require_master_key = true" assert_match(/Missing encryption key to decrypt file with/, run_show_command(allow_failure: true)) end test "show command does not raise error when require_master_key is false and master key does not exist" do remove_file "config/master.key" add_to_config "config.require_master_key = false" assert_match(/Missing 'config\/master\.key' to decrypt credentials/, run_show_command) end test "show command displays content specified by environment option" do run_edit_command(environment: "production") assert_match(/access_key_id: 123/, run_show_command(environment: "production")) end private def run_edit_command(editor: "cat", environment: nil, **options) switch_env("EDITOR", editor) do args = environment ? ["--environment", environment] : [] rails "credentials:edit", args, **options end end def run_show_command(environment: nil, **options) args = environment ? ["--environment", environment] : [] rails "credentials:show", args, **options end end