runConfigurationAssertions( new TwoFAccount(), [], [], ['*'], [], ['id' => 'int'], ['deleted' => TwoFAccountDeleted::class], ['created_at', 'updated_at'], \Illuminate\Database\Eloquent\Collection::class, 'twofaccounts', 'id', true ); } /** * @test * * @dataProvider provideSensitiveAttributes */ public function test_sensitive_attributes_are_stored_encrypted(string $attribute) { $settingService = $this->mock(SettingService::class, function (MockInterface $settingService) { $settingService->shouldReceive('get') ->with('useEncryption') ->andReturn(true); }); $twofaccount = TwoFAccount::factory()->make([ $attribute => 'STRING==', ]); $this->assertEquals('STRING==', Crypt::decryptString($twofaccount->getAttributes()[$attribute])); } /** * Provide attributes to test for encryption */ public function provideSensitiveAttributes(): array { return [ [ 'legacy_uri', ], [ 'secret', ], [ 'account', ], ]; } /** * @test * * @dataProvider provideSensitiveAttributes */ public function test_sensitive_attributes_are_returned_clear(string $attribute) { $settingService = $this->mock(SettingService::class, function (MockInterface $settingService) { $settingService->shouldReceive('get') ->with('useEncryption') ->andReturn(false); }); $twofaccount = TwoFAccount::factory()->make(); $this->assertEquals($twofaccount->getAttributes()[$attribute], $twofaccount->$attribute); } /** * @test * * @dataProvider provideSensitiveAttributes */ public function test_indecipherable_attributes_returns_masked_value(string $attribute) { $settingService = $this->mock(SettingService::class, function (MockInterface $settingService) { $settingService->shouldReceive('get') ->with('useEncryption') ->andReturn(true); }); Crypt::shouldReceive('encryptString') ->andReturn('indecipherableString'); $twofaccount = TwoFAccount::factory()->make(); $this->assertEquals(__('errors.indecipherable'), $twofaccount->$attribute); } /** * @test * * @runInSeparateProcess * @preserveGlobalState disabled */ public function test_secret_is_uppercased_and_padded_at_setup() { $settingService = $this->mock(SettingService::class, function (MockInterface $settingService) { $settingService->shouldReceive('get') ->with('useEncryption') ->andReturn(false); }); $helpers = $this->mock('alias:' . Helpers::class, function (MockInterface $helpers) { $helpers->shouldReceive('PadToBase32Format') ->andReturn('YYYY===='); }); $twofaccount = TwoFAccount::factory()->make([ 'secret' => 'yyyy', ]); $this->assertEquals('YYYY====', $twofaccount->secret); } }