mirror of
https://github.com/netbirdio/netbird.git
synced 2025-03-04 01:41:17 +01:00
d4b6d7646c
Implement user deletion across all IDP-ss. Expires all user peers when the user is deleted. Users are permanently removed from a local store, but in IDP, we remove Netbird attributes for the user untilUserDeleteFromIDPEnabled setting is not enabled. To test, an admin user should remove any additional users. Until the UI incorporates this feature, use a curl DELETE request targeting the /users/<USER_ID> management endpoint. Note that this request only removes user attributes and doesn't trigger a delete from the IDP. To enable user removal from the IdP, set UserDeleteFromIDPEnabled to true in account settings. Until we have a UI for this, make this change directly in the store file. Store the deleted email addresses in encrypted in activity store.
64 lines
1.3 KiB
Go
64 lines
1.3 KiB
Go
package sqlite
|
|
|
|
import (
|
|
"testing"
|
|
)
|
|
|
|
func TestGenerateKey(t *testing.T) {
|
|
testData := "exampl@netbird.io"
|
|
key, err := GenerateKey()
|
|
if err != nil {
|
|
t.Fatalf("failed to generate key: %s", err)
|
|
}
|
|
ee, err := NewEmailEncrypt(key)
|
|
if err != nil {
|
|
t.Fatalf("failed to init email encryption: %s", err)
|
|
}
|
|
|
|
encrypted := ee.Encrypt(testData)
|
|
if encrypted == "" {
|
|
t.Fatalf("invalid encrypted text")
|
|
}
|
|
|
|
decrypted, err := ee.Decrypt(encrypted)
|
|
if err != nil {
|
|
t.Fatalf("failed to decrypt data: %s", err)
|
|
}
|
|
|
|
if decrypted != testData {
|
|
t.Fatalf("decrypted data is not match with test data: %s, %s", testData, decrypted)
|
|
}
|
|
}
|
|
|
|
func TestCorruptKey(t *testing.T) {
|
|
testData := "exampl@netbird.io"
|
|
key, err := GenerateKey()
|
|
if err != nil {
|
|
t.Fatalf("failed to generate key: %s", err)
|
|
}
|
|
ee, err := NewEmailEncrypt(key)
|
|
if err != nil {
|
|
t.Fatalf("failed to init email encryption: %s", err)
|
|
}
|
|
|
|
encrypted := ee.Encrypt(testData)
|
|
if encrypted == "" {
|
|
t.Fatalf("invalid encrypted text")
|
|
}
|
|
|
|
newKey, err := GenerateKey()
|
|
if err != nil {
|
|
t.Fatalf("failed to generate key: %s", err)
|
|
}
|
|
|
|
ee, err = NewEmailEncrypt(newKey)
|
|
if err != nil {
|
|
t.Fatalf("failed to init email encryption: %s", err)
|
|
}
|
|
|
|
res, err := ee.Decrypt(encrypted)
|
|
if err == nil || res == testData {
|
|
t.Fatalf("incorrect decryption, the result is: %s", res)
|
|
}
|
|
}
|