functional-tests/kms/test_keys.py

# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

import requests
import pytest
from kms.utils import (
    krb_requests, fetch_logs,
    BASE_URL, PARAMS
)

class TestKeyManagement:

    @pytest.fixture(autouse=True)
    def setup_class(self, create_test_key):
        self.test_key = create_test_key

    def test_create_key(self,headers):
        key_data = {
            "name": "key2",
            "cipher": "AES/CTR/NoPadding",
            "length": 128,
            "description": "New key for checking key creation functionality"
        }
        response = krb_requests.post(f"{BASE_URL}/keys",headers=headers, json=key_data,params=PARAMS)

        if response.status_code != 201:
            error_logs = fetch_logs()  # Fetch logs on failure
            pytest.fail(f"Key creation failed. API Response: {response.text}\nLogs:\n{error_logs}")

        krb_requests.delete(f"{BASE_URL}/key/key2",params=PARAMS)               #cleanup key2

    #---------------------------------creation key validation------------------------------
    @pytest.mark.parametrize("name, expected_status", [
        ("valid-key", 201),
        ("", 400),                                     # Invalid case: Empty name
        ("@invalid!", 400),                            # Invalid case: Special characters
        ("invalid--key",400)                           #-- or __ or _- -_ not allowed
    ])
    def test_key_name_validation(self, headers, name, expected_status):
        key_data = {
            "name": name,
            "cipher": "AES/CTR/NoPadding",
            "length": 128,
            "description": "Validation test"
        }
        response = krb_requests.post(f"{BASE_URL}/keys", json=key_data, headers=headers,params=PARAMS)

        if response.status_code != expected_status:
            error_logs = fetch_logs()  # Fetch logs on failure
            pytest.fail(f"Key validation failed. API Response: {response.text}\nLogs:\n{error_logs}")

        if expected_status == 201:
            krb_requests.delete(f"{BASE_URL}/key/{name}", params=PARAMS)

    # Negative test----duplicate key creation test ----------------------------------------------
    def test_duplicate_key_creation(self, headers):
        key_name = "duplicate-key"
        key_data = {
            "name": key_name,
            "cipher": "AES/CTR/NoPadding",
            "length": 128,
            "description": "Testing duplicate key creation"
        }

        response1 = krb_requests.post(f"{BASE_URL}/keys", headers=headers, json=key_data, params=PARAMS)
        assert response1.status_code == 201, f"Initial key creation failed: {response1.text}"

        # creating the same key again
        response2 = krb_requests.post(f"{BASE_URL}/keys", headers=headers, json=key_data, params=PARAMS)

        assert response2.status_code == 500, f"Duplicate key got created, expected to fail"

        # Cleanup
        krb_requests.delete(f"{BASE_URL}/key/{key_name}", params=PARAMS)