Function TestAIProviderKeys

enterprise/dbcrypt/dbcrypt_internal_test.go:1229–1307

(t *testing.T)

}

func TestAIProviderKeys(t *testing.T) {
	t.Parallel()
	ctx := context.Background()

	//nolint:gosec // test credentials
	const apiKey = "sk-test-api-key"

	insertProviderAndKey := func(t *testing.T, crypt *dbCrypt, ciphers []Cipher) (database.AIProvider, database.AIProviderKey) {
		t.Helper()
		provider := dbgen.AIProvider(t, crypt, database.AIProvider{
			Name:    "openai-test",
			Type:    database.AiProviderTypeOpenai,
			BaseUrl: "https://api.openai.com/v1/",
		})
		key := dbgen.AIProviderKey(t, crypt, database.AIProviderKey{
			ProviderID: provider.ID,
			APIKey:     apiKey,
		})
		requireAIProviderKeyDecrypted(t, key, ciphers, apiKey)
		return provider, key
	}

	t.Run("InsertAIProviderKey", func(t *testing.T) {
		t.Parallel()
		db, crypt, ciphers := setup(t)
		_, key := insertProviderAndKey(t, crypt, ciphers)
		requireAIProviderKeyRawEncrypted(ctx, t, db, key.ID, ciphers, apiKey)
	})

	t.Run("InsertAIProviderKeyEmpty", func(t *testing.T) {
		t.Parallel()
		db, crypt, _ := setup(t)
		provider := dbgen.AIProvider(t, crypt, database.AIProvider{
			Name: "openai-empty-key",
		})
		key := dbgen.AIProviderKey(t, crypt, database.AIProviderKey{
			ProviderID: provider.ID,
		}, func(p *database.InsertAIProviderKeyParams) {
			p.APIKey = ""
		})
		require.False(t, key.ApiKeyKeyID.Valid)
		raw, err := db.GetAIProviderKeyByID(ctx, key.ID)
		require.NoError(t, err)
		require.Empty(t, raw.APIKey)
	})

	t.Run("GetAIProviderKeysByProviderID", func(t *testing.T) {
		t.Parallel()
		db, crypt, ciphers := setup(t)
		provider, key := insertProviderAndKey(t, crypt, ciphers)
		keys, err := crypt.GetAIProviderKeysByProviderID(ctx, provider.ID)
		require.NoError(t, err)
		require.Len(t, keys, 1)
		requireAIProviderKeyDecrypted(t, keys[0], ciphers, apiKey)
		requireAIProviderKeyRawEncrypted(ctx, t, db, key.ID, ciphers, apiKey)
	})

	t.Run("GetAIProviderKeysByProviderIDs", func(t *testing.T) {