- Switch to use `CryptoRandomBytes` instead of `CryptoRandomString`, OAuth's secrets are copied pasted and don't need to avoid dubious characters etc. - `CryptoRandomBytes` gives  `CryptoRandomString` gives  possible states. - Add a prefix, such that code scanners can easily grep these in source code. - 32 Bytes + prefix
		
			
				
	
	
		
			25 lines
		
	
	
		
			526 B
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			25 lines
		
	
	
		
			526 B
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright 2019 The Gitea Authors. All rights reserved.
 | |
| // Use of this source code is governed by a MIT-style
 | |
| // license that can be found in the LICENSE file.
 | |
| 
 | |
| package secret
 | |
| 
 | |
| import (
 | |
| 	"testing"
 | |
| 
 | |
| 	"github.com/stretchr/testify/assert"
 | |
| )
 | |
| 
 | |
| func TestEncryptDecrypt(t *testing.T) {
 | |
| 	var hex string
 | |
| 	var str string
 | |
| 
 | |
| 	hex, _ = EncryptSecret("foo", "baz")
 | |
| 	str, _ = DecryptSecret("foo", hex)
 | |
| 	assert.Equal(t, str, "baz")
 | |
| 
 | |
| 	hex, _ = EncryptSecret("bar", "baz")
 | |
| 	str, _ = DecryptSecret("foo", hex)
 | |
| 	assert.NotEqual(t, str, "baz")
 | |
| }
 |