Joseph Doherty
d82d3451e7
G-8 (KEK rotation) — built in ZB.MOM.WW.Secrets, lib 0.1.2->0.1.3: - ISecretCipher.Rewrap(row, oldKek, newKek): re-wraps the per-secret DEK only (bodies never re-encrypted; revision/timestamps preserved -> invisible to cluster LWW). Fail-closed on wrong old-KEK id, wrong key bytes, and malformed wraps; DEK zeroed on all paths. - ISecretStore.ApplyRewrapAsync(rewrappedRow, expectedCurrentWrappedDek): updates only the 4 wrap columns + kek_id, compare-and-swap on the current wrapped DEK so a concurrent set/rotate cannot corrupt a row (closes a review-caught TOCTOU). - KekRotationService.RewrapAllAsync + RewrapReport: enumerate all rows incl. tombstones, idempotent/resumable skip-already-current, bounded CAS-retry, fail-closed on unknown/identical KEK. - `secret rewrap-all` CLI verb: key material only via env-var name / file path, JSON counts report; README section + operator runbook. Verified: full offline suite green (82 core + 15 UI, 0 regressions) + end-to-end CLI smoke + adversarial crypto review (all 7 categories PASS; TOCTOU fixed). G-7 (clustered replication) — designed + planned, no code: - Fork resolved to build Option A (shared SQL-Server ISecretStore); Akka replicator ZB.MOM.WW.Secrets.Akka is a deferred phase-2. Design doc + executable plan + .tasks.json under docs/plans/2026-07-17-secrets-g7-*. Tracking: components/secrets/GAPS.md + CLAUDE.md secrets row updated.
57 lines
2.2 KiB
C#
57 lines
2.2 KiB
C#
using System.Collections.Concurrent;
|
|
using ZB.MOM.WW.Secrets.Abstractions;
|
|
|
|
namespace ZB.MOM.WW.Secrets.Tests.Fakes;
|
|
|
|
/// <summary>
|
|
/// An in-memory <see cref="ISecretStore"/> test double that counts <see cref="GetAsync"/> calls so
|
|
/// a test can prove a resolver cache hit (or miss). Only the read path exercised by
|
|
/// <c>DefaultSecretResolver</c> is meaningfully implemented; the mutation / replication members
|
|
/// throw so an accidental dependency on them fails loudly rather than silently no-ops.
|
|
/// </summary>
|
|
public sealed class CountingSecretStore : ISecretStore
|
|
{
|
|
private readonly ConcurrentDictionary<string, StoredSecret> _rows = new(StringComparer.Ordinal);
|
|
private int _getCount;
|
|
|
|
/// <summary>The number of times <see cref="GetAsync"/> has been invoked.</summary>
|
|
public int GetCount => Volatile.Read(ref _getCount);
|
|
|
|
/// <summary>Seeds (or overwrites) a row keyed by its normalized name.</summary>
|
|
/// <param name="row">The encrypted row to seed.</param>
|
|
public void Seed(StoredSecret row) => _rows[row.Name.Value] = row;
|
|
|
|
/// <inheritdoc />
|
|
public Task<StoredSecret?> GetAsync(SecretName name, CancellationToken ct)
|
|
{
|
|
Interlocked.Increment(ref _getCount);
|
|
_rows.TryGetValue(name.Value, out StoredSecret? row);
|
|
return Task.FromResult(row);
|
|
}
|
|
|
|
/// <inheritdoc />
|
|
public Task UpsertAsync(StoredSecret row, CancellationToken ct) =>
|
|
throw new NotSupportedException();
|
|
|
|
/// <inheritdoc />
|
|
public Task<bool> DeleteAsync(SecretName name, string? actor, CancellationToken ct) =>
|
|
throw new NotSupportedException();
|
|
|
|
/// <inheritdoc />
|
|
public Task<IReadOnlyList<SecretMetadata>> ListAsync(bool includeDeleted, CancellationToken ct) =>
|
|
throw new NotSupportedException();
|
|
|
|
/// <inheritdoc />
|
|
public Task<IReadOnlyList<SecretManifestEntry>> GetManifestAsync(CancellationToken ct) =>
|
|
throw new NotSupportedException();
|
|
|
|
/// <inheritdoc />
|
|
public Task ApplyReplicatedAsync(StoredSecret row, CancellationToken ct) =>
|
|
throw new NotSupportedException();
|
|
|
|
/// <inheritdoc />
|
|
public Task<bool> ApplyRewrapAsync(
|
|
StoredSecret rewrappedRow, byte[] expectedCurrentWrappedDek, CancellationToken ct) =>
|
|
throw new NotSupportedException();
|
|
}
|