1package config
2
3import (
4 "github.com/bnema/neferafk/internal/ports"
5 "strings"
6 "testing"
7 "time"
8)
9
10func TestDefaultsAndIndependentOff(t *testing.T) {
11 c, err := Parse(strings.NewReader("# defaults\n"))
12 if err != nil || c != ports.Defaults() {
13 t.Fatal(c, err)
14 }
15 c, err = Parse(strings.NewReader("lock.after = off\nfade.after = 1s\nfade.duration = 0s\nscreens.off-after = off\nsleep.after = 24h\nauth.mode = pin\nauth.pin-source = env\nauth.pin-env = NEFERAFK_PIN\n"))
16 if err != nil || c.LockAfter != 0 || c.FadeAfter != time.Second || c.FadeDuration != 0 || c.SleepAfter != 24*time.Hour || c.Auth.PINEnv != "NEFERAFK_PIN" {
17 t.Fatal(c, err)
18 }
19}
20func TestRejectTransactionalBoundsUnknownDuplicateAndSecrets(t *testing.T) {
21 for _, text := range []string{"unknown = x", "lock.after=1s\nlock.after=2s", "lock.after=0s", "lock.after=-1s", "sleep.after=25h", "fade.duration=-1s", "fade.duration=off", "auth.password=false", "auth.pin-reference=x", "auth.mode=unknown", "auth.mode=pin", "auth.pin-source=pass\nauth.pin-entry=-option", "auth.pin-source=pass\nauth.pin-entry=a\x00b", "auth.pin=1234", "auth.pin-source=env\nauth.pin-env=SECRET=123", "auth.pin-source=pass\nauth.pin-entry=../secret", "auth.pin-source=pass\nauth.pin-entry=/secret", strings.Repeat("#", MaxLine+1), strings.Repeat("#\n", MaxBytes)} {
22 c, err := Parse(strings.NewReader(text))
23 if err == nil || c != (ports.Config{}) {
24 t.Fatalf("accepted/partial invalid input length %d", len(text))
25 }
26 }
27}
28func TestLockOutput(t *testing.T) {
29 c, err := Parse(strings.NewReader("lock.output = DP-2\n"))
30 if err != nil || c.LockOutput != "DP-2" {
31 t.Fatal(c, err)
32 }
33 if _, err := Parse(strings.NewReader("lock.output = " + strings.Repeat("x", ports.MaxOutputName+1))); err == nil {
34 t.Fatal("oversized output name accepted")
35 }
36 cfg := ports.Defaults()
37 cfg.LockOutput = "DP\x01"
38 if err := cfg.Validate(); err == nil {
39 t.Fatal("control character in output name accepted")
40 }
41}
42func TestPassReferenceMetadataOnly(t *testing.T) {
43 c, err := Parse(strings.NewReader("auth.pin-source=pass\nauth.pin-entry=desktop/neferafk\n"))
44 if err != nil || c.Auth.PINEntry != "desktop/neferafk" {
45 t.Fatal(c, err)
46 }
47}
48func TestDefaultPath(t *testing.T) {
49 t.Setenv("XDG_CONFIG_HOME", "/config")
50 if got := DefaultPath(); got != "/config/neferafk/config" {
51 t.Fatal(got)
52 }
53}
54
55func TestUnknownKeyDiagnosticCannotEchoSecret(t *testing.T) {
56 secret := "accidental-password-should-never-appear"
57 _, err := Parse(strings.NewReader(secret + " = " + secret))
58 if err == nil || strings.Contains(err.Error(), secret) {
59 t.Fatalf("unsafe diagnostic %v", err)
60 }
61}
62func TestRejectInvalidUTF8BeforeParsingAndDirectMetadata(t *testing.T) {
63 for _, text := range []string{"# \xff", "auth.pin-source=pass\nauth.pin-entry=a\xff"} {
64 if _, err := Parse(strings.NewReader(text)); err == nil {
65 t.Fatal("invalid UTF-8 parsed")
66 }
67 }
68 cfg := ports.Defaults()
69 cfg.Auth.PINSource = ports.PINSourcePass
70 cfg.Auth.PINEntry = "entry\xff"
71 if err := cfg.Validate(); err == nil {
72 t.Fatal("direct invalid UTF-8 metadata admitted")
73 }
74}