Marco Ricci commited on 2024-06-22 21:19:30
Zeige 2 geänderte Dateien mit 184 Einfügungen und 0 Löschungen.
In particular, include type guard functions here as well.
... | ... |
@@ -0,0 +1,133 @@ |
1 |
+# SPDX-FileCopyrightText: 2024 Marco Ricci <m@the13thletter.info> |
|
2 |
+# |
|
3 |
+# SPDX-License-Identifier: MIT |
|
4 |
+ |
|
5 |
+"""Common typing declarations for the parent module. |
|
6 |
+ |
|
7 |
+""" |
|
8 |
+ |
|
9 |
+from __future__ import annotations |
|
10 |
+ |
|
11 |
+from typing import Any, NotRequired, Required, TypedDict, TypeGuard |
|
12 |
+ |
|
13 |
+import derivepassphrase |
|
14 |
+ |
|
15 |
+__author__ = derivepassphrase.__author__ |
|
16 |
+__version__ = derivepassphrase.__version__ |
|
17 |
+ |
|
18 |
+class VaultConfigGlobalSettings(TypedDict, total=False): |
|
19 |
+ r"""Configuration for vault: global settings. |
|
20 |
+ |
|
21 |
+ Attributes: |
|
22 |
+ key: |
|
23 |
+ The base64-encoded ssh public key to use, overriding the |
|
24 |
+ master passphrase. Optional. |
|
25 |
+ phrase: |
|
26 |
+ The master passphrase. Optional. |
|
27 |
+ |
|
28 |
+ """ |
|
29 |
+ key: NotRequired[str] |
|
30 |
+ phrase: NotRequired[str] |
|
31 |
+ |
|
32 |
+ |
|
33 |
+class VaultConfigServicesSettings(VaultConfigGlobalSettings, total=False): |
|
34 |
+ r"""Configuration for vault: services settings. |
|
35 |
+ |
|
36 |
+ Attributes: |
|
37 |
+ notes: |
|
38 |
+ Optional notes for this service, to display to the user when |
|
39 |
+ generating the passphrase. |
|
40 |
+ length: |
|
41 |
+ Desired passphrase length. |
|
42 |
+ repeat: |
|
43 |
+ The maximum number of immediate character repetitions |
|
44 |
+ allowed in the passphrase. Disabled if set to 0. |
|
45 |
+ lower: |
|
46 |
+ Optional constraint on ASCII lowercase characters. If |
|
47 |
+ positive, include this many lowercase characters |
|
48 |
+ somewhere in the passphrase. If 0, avoid lowercase |
|
49 |
+ characters altogether. |
|
50 |
+ upper: |
|
51 |
+ Same as `lower`, but for ASCII uppercase characters. |
|
52 |
+ number: |
|
53 |
+ Same as `lower`, but for ASCII digits. |
|
54 |
+ space: |
|
55 |
+ Same as `lower`, but for the space character. |
|
56 |
+ dash: |
|
57 |
+ Same as `lower`, but for the hyphen-minus and underscore |
|
58 |
+ characters. |
|
59 |
+ symbol: |
|
60 |
+ Same as `lower`, but for all other hitherto unlisted |
|
61 |
+ ASCII printable characters (except backquote). |
|
62 |
+ |
|
63 |
+ """ |
|
64 |
+ notes: NotRequired[str] |
|
65 |
+ length: NotRequired[int] |
|
66 |
+ repeat: NotRequired[int] |
|
67 |
+ lower: NotRequired[int] |
|
68 |
+ upper: NotRequired[int] |
|
69 |
+ number: NotRequired[int] |
|
70 |
+ space: NotRequired[int] |
|
71 |
+ dash: NotRequired[int] |
|
72 |
+ symbol: NotRequired[int] |
|
73 |
+ |
|
74 |
+ |
|
75 |
+_VaultConfig = TypedDict('_VaultConfig', |
|
76 |
+ {'global': NotRequired[VaultConfigGlobalSettings]}, |
|
77 |
+ total=False) |
|
78 |
+class VaultConfig(TypedDict, _VaultConfig, total=False): |
|
79 |
+ r"""Configuration for vault. |
|
80 |
+ |
|
81 |
+ Usually stored as JSON. |
|
82 |
+ |
|
83 |
+ Attributes: |
|
84 |
+ global (NotRequired[VaultConfigGlobalSettings]): |
|
85 |
+ Global settings. |
|
86 |
+ services (Required[dict[str, VaultConfigServicesSettings]]): |
|
87 |
+ Service-specific settings. |
|
88 |
+ |
|
89 |
+ """ |
|
90 |
+ services: Required[dict[str, VaultConfigServicesSettings]] |
|
91 |
+ |
|
92 |
+def is_vault_config(obj: Any) -> TypeGuard[VaultConfig]: |
|
93 |
+ """Check if `obj` is a valid vault config, according to typing. |
|
94 |
+ |
|
95 |
+ Args: |
|
96 |
+ obj: The object to test. |
|
97 |
+ |
|
98 |
+ Returns: |
|
99 |
+ True if this is a vault config, false otherwise. |
|
100 |
+ |
|
101 |
+ """ |
|
102 |
+ if not isinstance(obj, dict): |
|
103 |
+ return False |
|
104 |
+ if 'global' in obj: |
|
105 |
+ o_global = obj['global'] |
|
106 |
+ if not isinstance(o_global, dict): |
|
107 |
+ return False |
|
108 |
+ for key in ('key', 'phrase'): |
|
109 |
+ if key in o_global and not isinstance(o_global[key], str): |
|
110 |
+ return False |
|
111 |
+ if 'key' in o_global and 'phrase' in o_global: |
|
112 |
+ return False |
|
113 |
+ if not isinstance(obj.get('services'), dict): |
|
114 |
+ return False |
|
115 |
+ for sv_name, service in obj['services'].items(): |
|
116 |
+ if not isinstance(sv_name, str): |
|
117 |
+ return False |
|
118 |
+ if not isinstance(service, dict): |
|
119 |
+ return False |
|
120 |
+ for key, value in service.items(): |
|
121 |
+ match key: |
|
122 |
+ case 'notes' | 'phrase' | 'key': |
|
123 |
+ if not isinstance(value, str): |
|
124 |
+ return False |
|
125 |
+ case 'length': |
|
126 |
+ if not isinstance(value, int) or value < 1: |
|
127 |
+ return False |
|
128 |
+ case _: |
|
129 |
+ if not isinstance(value, int) or value < 0: |
|
130 |
+ return False |
|
131 |
+ if 'key' in service and 'phrase' in service: |
|
132 |
+ return False |
|
133 |
+ return True |
... | ... |
@@ -0,0 +1,51 @@ |
1 |
+# SPDX-FileCopyrightText: 2024 Marco Ricci <m@the13thletter.info> |
|
2 |
+# |
|
3 |
+# SPDX-License-Identifier: MIT |
|
4 |
+ |
|
5 |
+from __future__ import annotations |
|
6 |
+ |
|
7 |
+from typing import Any, cast, TYPE_CHECKING, NamedTuple |
|
8 |
+ |
|
9 |
+import derivepassphrase as dpp |
|
10 |
+import pytest |
|
11 |
+ |
|
12 |
+@pytest.mark.parametrize(['obj', 'comment'], [ |
|
13 |
+ (None, 'not a dict'), |
|
14 |
+ ({}, 'missing required keys'), |
|
15 |
+ ({'global': None, 'services': {}}, 'bad config value: global'), |
|
16 |
+ ({'global': {'key': 123}, 'services': {}}, |
|
17 |
+ 'bad config value: global.key'), |
|
18 |
+ ({'global': {'phrase': 'abc', 'key': '...'}, 'services': {}}, |
|
19 |
+ 'incompatible config values: global.key and global.phrase'), |
|
20 |
+ ({'services': None}, 'bad config value: services'), |
|
21 |
+ ({'services': {2: {}}}, 'bad config value: services."2"'), |
|
22 |
+ ({'services': {'2': 2}}, 'bad config value: services."2"'), |
|
23 |
+ ({'services': {'sv': {'notes': False}}}, |
|
24 |
+ 'bad config value: services.sv.notes'), |
|
25 |
+ ({'services': {'sv': {'notes': 'blah blah blah'}}}, ''), |
|
26 |
+ ({'services': {'sv': {'length': '200'}}}, |
|
27 |
+ 'bad config value: services.sv.length'), |
|
28 |
+ ({'services': {'sv': {'length': 0.5}}}, |
|
29 |
+ 'bad config value: services.sv.length'), |
|
30 |
+ ({'services': {'sv': {'length': -10}}}, |
|
31 |
+ 'bad config value: services.sv.length'), |
|
32 |
+ ({'services': {'sv': {'upper': -10}}}, |
|
33 |
+ 'bad config value: services.sv.upper'), |
|
34 |
+ ({'global': {'phrase': 'my secret phrase'}, |
|
35 |
+ 'services': {'sv': {'length': 10}}}, |
|
36 |
+ ''), |
|
37 |
+ ({'services': {'sv': {'length': 10, 'phrase': '...'}}}, ''), |
|
38 |
+ ({'services': {'sv': {'length': 10, 'key': '...'}}}, ''), |
|
39 |
+ ({'services': {'sv': {'upper': 10, 'key': '...'}}}, ''), |
|
40 |
+ ({'services': {'sv': {'phrase': 'abc', 'key': '...'}}}, |
|
41 |
+ 'incompatible config values: services.sv.key and services.sv.phrase'), |
|
42 |
+ ({'global': {'phrase': 'abc'}, |
|
43 |
+ 'services': {'sv': {'phrase': 'abc', 'length': 10}}}, ''), |
|
44 |
+ ({'global': {'key': '...'}, |
|
45 |
+ 'services': {'sv': {'phrase': 'abc', 'length': 10}}}, ''), |
|
46 |
+]) |
|
47 |
+def test_200_is_vault_config(obj: Any, comment: str) -> None: |
|
48 |
+ assert dpp.types.is_vault_config(obj) == (not comment), ( |
|
49 |
+ 'failed to complain about: ' + comment if comment |
|
50 |
+ else 'failed on valid example' |
|
51 |
+ ) |
|
0 | 52 |