Initial public release

tests/test_key_security.py

@@ -0,0 +1,34 @@
+import os
+import pytest
+from pathlib import Path
+from hydra.config.keys import KeyManager
+
+
+def test_gitignore_contains_env():
+    content = Path(".gitignore").read_text()
+    assert ".env" in content
+    assert "config/keys/" in content
+    assert "*.key" in content
+
+
+def test_key_roundtrip(tmp_path):
+    km = KeyManager(master_key_path=str(tmp_path / "master.key"))
+    km.store("binance", "my_api_key", "my_secret")
+    api_key, secret = km.load("binance")
+    assert api_key == "my_api_key"
+    assert secret == "my_secret"
+
+
+def test_stored_file_is_not_plaintext(tmp_path):
+    km = KeyManager(master_key_path=str(tmp_path / "master.key"))
+    km.store("upbit", "plain_key", "plain_secret")
+    key_file = tmp_path / "upbit.enc"
+    assert key_file.exists()
+    raw = key_file.read_bytes()
+    assert b"plain_key" not in raw
+    assert b"plain_secret" not in raw
+
+
+def test_withdrawal_check_no_permission(tmp_path):
+    km = KeyManager(master_key_path=str(tmp_path / "master.key"))
+    assert km.check_withdrawal_permission("binance") is False