summaryrefslogtreecommitdiff
path: root/spec/migrations/encrypt_feature_flags_clients_tokens_spec.rb
diff options
context:
space:
mode:
Diffstat (limited to 'spec/migrations/encrypt_feature_flags_clients_tokens_spec.rb')
-rw-r--r--spec/migrations/encrypt_feature_flags_clients_tokens_spec.rb36
1 files changed, 0 insertions, 36 deletions
diff --git a/spec/migrations/encrypt_feature_flags_clients_tokens_spec.rb b/spec/migrations/encrypt_feature_flags_clients_tokens_spec.rb
deleted file mode 100644
index 62bd0dafb8e..00000000000
--- a/spec/migrations/encrypt_feature_flags_clients_tokens_spec.rb
+++ /dev/null
@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-require_migration!
-
-RSpec.describe EncryptFeatureFlagsClientsTokens do
- let(:migration) { described_class.new }
- let(:feature_flags_clients) { table(:operations_feature_flags_clients) }
- let(:projects) { table(:projects) }
- let(:plaintext) { "secret-token" }
- let(:ciphertext) { Gitlab::CryptoHelper.aes256_gcm_encrypt(plaintext, nonce: Gitlab::CryptoHelper::AES256_GCM_IV_STATIC) }
-
- describe '#up' do
- it 'keeps plaintext token the same and populates token_encrypted if not present' do
- project = projects.create!(id: 123, name: 'gitlab1', path: 'gitlab1', namespace_id: 123)
- feature_flags_client = feature_flags_clients.create!(project_id: project.id, token: plaintext)
-
- migration.up
-
- expect(feature_flags_client.reload.token).to eq(plaintext)
- expect(feature_flags_client.reload.token_encrypted).to eq(ciphertext)
- end
- end
-
- describe '#down' do
- it 'decrypts encrypted token and saves it' do
- project = projects.create!(id: 123, name: 'gitlab1', path: 'gitlab1', namespace_id: 123)
- feature_flags_client = feature_flags_clients.create!(project_id: project.id, token_encrypted: ciphertext)
-
- migration.down
-
- expect(feature_flags_client.reload.token).to eq(plaintext)
- expect(feature_flags_client.reload.token_encrypted).to eq(ciphertext)
- end
- end
-end