DateKeys/internal/testkit/fixture.go

package testkit

import (
	"encoding/json"
	"os"
	"path/filepath"
	"regexp"
)

// FixtureStanza is the visible part of an age stanza in a fixture.
type FixtureStanza struct {
	Type string   `json:"type"`
	Args []string `json:"args"`
}

// FixtureRelease is the release a fixture opens with.
type FixtureRelease struct {
	Round     uint64 `json:"round"`
	Signature string `json:"signature"`
}

// FixtureStage is the expected result of one step of spec §63.
type FixtureStage struct {
	Step  int    `json:"step"`
	Name  string `json:"name"`
	OK    bool   `json:"ok"`
	Error string `json:"error,omitempty"`
}

// DKCFixture holds the expected values of an official .dkc fixture (spec §67).
type DKCFixture struct {
	Description string `json:"description"`
	Spec        string `json:"spec"`
	// Format is the capsule format, the VERSION of the PRELUDE (spec §22).
	Format         int             `json:"format"`
	File           string          `json:"file"`
	SHA256         string          `json:"sha256"`
	Release        FixtureRelease  `json:"release"`
	Prelude        string          `json:"prelude"`
	PublicHeader   string          `json:"public_header"`
	DateKey        string          `json:"datekey"`
	CapsuleID      string          `json:"capsule_id"`
	AccessPolicy   string          `json:"access_policy"`
	Structure      string          `json:"structure"`
	UnlockAt       string          `json:"unlock_at"`
	HeaderBinding  string          `json:"header_binding"`
	OuterStanzas   []FixtureStanza `json:"outer_stanzas"`
	PayloadStanzas []FixtureStanza `json:"payload_stanzas"`
	InnerStanzas   []FixtureStanza `json:"inner_stanzas,omitempty"`
	// AccessKeyStanza and IdentityStanzas are, in a format 2 time_and_key
	// fixture, the index in InnerStanzas of the stanza each credential
	// opens: the .dkk, and each identity of Identities in order. The stanzas
	// no credential opens are dummies. Official vectors are the only place
	// where this is recorded (spec §39, §67).
	AccessKeyStanza *int     `json:"access_key_stanza,omitempty"`
	IdentityStanzas []int    `json:"identity_stanzas,omitempty"`
	AccessKeyFile   string   `json:"access_key_file,omitempty"`
	Identities      []string `json:"identities,omitempty"`
	ControlCBOR     string   `json:"control_cbor"`
	PayloadIdentity string   `json:"payload_identity"`
	// PayloadLength is L, the length of the content, the plaintext the
	// reader delivers. In format 2 the plaintext of PAYLOAD_AGE is
	// PaddedLength bytes, P = rule(L), the rule being Padding (spec §29.1).
	PayloadLength    uint64         `json:"payload_length"`
	Padding          int            `json:"padding,omitempty"`
	PaddedLength     uint64         `json:"padded_length,omitempty"`
	PlaintextFile    string         `json:"plaintext_file"`
	PlaintextSHA256  string         `json:"plaintext_sha256"`
	HeaderExtensions []FixtureExt   `json:"header_extensions,omitempty"`
	ControlExt       []FixtureExt   `json:"control_extensions,omitempty"`
	Stages           []FixtureStage `json:"stages"`
}

// FixtureExt is an extension in a fixture.
type FixtureExt struct {
	Critical bool   `json:"critical"`
	ID       string `json:"id"`
	Version  uint64 `json:"version"`
	Data     string `json:"data,omitempty"` // hex of the exact data bytes; absent without data
}

// DKKFixture holds the expected values of an official .dkk fixture (spec §68).
type DKKFixture struct {
	Description    string         `json:"description"`
	Spec           string         `json:"spec"`
	File           string         `json:"file"`
	SHA256         string         `json:"sha256"`
	CredentialID   string         `json:"credential_id"`
	CapsuleID      string         `json:"capsule_id"`
	AccessType     string         `json:"access_type"`
	Material       string         `json:"access_material"`
	CapsuleDigest  string         `json:"capsule_digest,omitempty"`
	Extensions     []FixtureExt   `json:"extensions,omitempty"`
	Capsule        string         `json:"capsule"`
	ExpectedResult string         `json:"expected_result"`
	Stages         []FixtureStage `json:"stages,omitempty"`
}

// ReadJSON decodes a JSON file.
func ReadJSON(path string, v any) error {
	b, err := os.ReadFile(path)
	if err != nil {
		return err
	}
	return json.Unmarshal(b, v)
}

// WriteJSON writes v as indented JSON with a trailing newline.
func WriteJSON(path string, v any) error {
	b, err := json.MarshalIndent(v, "", "  ")
	if err != nil {
		return err
	}
	return writeFile(path, append(b, '\n'))
}

// editPattern is an Edit as json.MarshalIndent spreads it over five lines.
var editPattern = regexp.MustCompile(`\[\n\s*(\d+),\n\s*(\d+),\n\s*("[0-9a-f]*")\n\s*\]`)

// WriteJSONEdits is WriteJSON with every Edit, [at, delete, "hex"], on one
// line.
func WriteJSONEdits(path string, v any) error {
	b, err := json.MarshalIndent(v, "", "  ")
	if err != nil {
		return err
	}
	return writeFile(path, append(editPattern.ReplaceAll(b, []byte("[$1, $2, $3]")), '\n'))
}

func writeFile(path string, b []byte) error {
	if err := os.MkdirAll(filepath.Dir(path), 0o755); err != nil {
		return err
	}
	return os.WriteFile(path, b, 0o644)
}