Joseph Doherty
513fa1aa16
Comment/XML-doc changes only: - add summaries to ~10k test methods, fixtures, fakes and helpers (+ <param> on theories, <returns> on async Task methods, <inheritdoc/> on interface implementations the checker can resolve) - strip ~2.6k project-tracking references (WP*, P*-*, row-NN, Task N, #NN, Component-0NN) from comments, keeping the explanatory text; reword false positives in comments only - real docs on fakes implementing BCL/library interfaces (IDisposable, ILogger, IOptionsMonitor, IAsyncLifetime) - reword the last 5 src/ false positives (CWE-1236, failures-1, year-0001, M365) Only non-comment edits: four one-line nested classes split across lines so members can carry docs. Build 0 errors / 0 warnings.
67 lines
2.5 KiB
C#
67 lines
2.5 KiB
C#
using Microsoft.AspNetCore.DataProtection;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using Microsoft.Extensions.DependencyInjection;
|
|
using ZB.MOM.WW.ScadaBridge.ConfigurationDatabase;
|
|
|
|
namespace ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Tests;
|
|
|
|
public class DataProtectionTests : IDisposable
|
|
{
|
|
private readonly string _dbPath;
|
|
|
|
/// <summary>Creates a unique temporary database path for each test.</summary>
|
|
public DataProtectionTests()
|
|
{
|
|
_dbPath = Path.Combine(Path.GetTempPath(), $"scadabridge_dp_test_{Guid.NewGuid()}.db");
|
|
}
|
|
|
|
/// <summary>Releases the resources held by the test fixture.</summary>
|
|
public void Dispose()
|
|
{
|
|
if (File.Exists(_dbPath))
|
|
File.Delete(_dbPath);
|
|
}
|
|
|
|
/// <summary>Verifies that data protected in one container can be unprotected in another that shares the same key store.</summary>
|
|
[Fact]
|
|
public void SharedDataProtection_ProtectAndUnprotect_AcrossContainers()
|
|
{
|
|
var connectionString = $"DataSource={_dbPath}";
|
|
|
|
// Create the database schema
|
|
var setupOptions = new DbContextOptionsBuilder<ScadaBridgeDbContext>()
|
|
.UseSqlite(connectionString)
|
|
.Options;
|
|
using (var setupCtx = new ScadaBridgeDbContext(setupOptions))
|
|
{
|
|
setupCtx.Database.EnsureCreated();
|
|
}
|
|
|
|
// Container 1: protect some data
|
|
var services1 = new ServiceCollection();
|
|
services1.AddDbContext<ScadaBridgeDbContext>(opt => opt.UseSqlite(connectionString));
|
|
services1.AddDataProtection()
|
|
.SetApplicationName("ScadaBridge")
|
|
.PersistKeysToDbContext<ScadaBridgeDbContext>();
|
|
|
|
using var provider1 = services1.BuildServiceProvider();
|
|
var protector1 = provider1.GetRequiredService<IDataProtectionProvider>()
|
|
.CreateProtector("test-purpose");
|
|
var protectedPayload = protector1.Protect("secret-data");
|
|
|
|
// Container 2: unprotect using the same DB (shared keys)
|
|
var services2 = new ServiceCollection();
|
|
services2.AddDbContext<ScadaBridgeDbContext>(opt => opt.UseSqlite(connectionString));
|
|
services2.AddDataProtection()
|
|
.SetApplicationName("ScadaBridge")
|
|
.PersistKeysToDbContext<ScadaBridgeDbContext>();
|
|
|
|
using var provider2 = services2.BuildServiceProvider();
|
|
var protector2 = provider2.GetRequiredService<IDataProtectionProvider>()
|
|
.CreateProtector("test-purpose");
|
|
var unprotected = protector2.Unprotect(protectedPayload);
|
|
|
|
Assert.Equal("secret-data", unprotected);
|
|
}
|
|
}
|