@imagina-build/ias-cli 0.0.0 → 0.1.0

package/shared/vault/test-vectors/ias-vault-2/plaintexts.json

@@ -0,0 +1,149 @@
+{
+  "format": "ias-vault-2",
+  "description": "What an envelope holds for each credential type (docs/technical/vault.md §3.5): good has one plaintext per type, with fake files; bad must be refused with code by validatePlaintext(type, bytes). text is the UTF-8 of the plaintext; plaintext, its bytes in base64url.",
+  "warning": "Test vectors: the keys are public. Never use them for anything else.",
+  "good": [
+    {
+      "type": "apple_distribution_certificate",
+      "scope": "team",
+      "text": "{\"type\":\"apple_distribution_certificate\",\"p12\":\"bm90IGEgcmVhbCBwMTI6ILHzqRYEKDaZOuWFAuPckU7HfyHhKFhP5ZA2iKwRhN3K\",\"password\":\"not-a-real-p12-password\"}",
+      "plaintext": "eyJ0eXBlIjoiYXBwbGVfZGlzdHJpYnV0aW9uX2NlcnRpZmljYXRlIiwicDEyIjoiYm05MElHRWdjbVZoYkNCd01USTZJTEh6cVJZRUtEYVpPdVdGQXVQY2tVN0hmeUhoS0ZoUDVaQTJpS3dSaE4zSyIsInBhc3N3b3JkIjoibm90LWEtcmVhbC1wMTItcGFzc3dvcmQifQ"
+    },
+    {
+      "type": "apple_provisioning_profile",
+      "scope": "application",
+      "text": "{\"type\":\"apple_provisioning_profile\",\"application\":\"jscheduler\",\"mobileprovision\":\"bm90IGEgcmVhbCBtb2JpbGVwcm92aXNpb246IIDrY0XB8PVcacIIcw-xNptlAHE7I5Lm7FoXmd9BDQ-_\"}",
+      "plaintext": "eyJ0eXBlIjoiYXBwbGVfcHJvdmlzaW9uaW5nX3Byb2ZpbGUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJtb2JpbGVwcm92aXNpb24iOiJibTkwSUdFZ2NtVmhiQ0J0YjJKcGJHVndjbTkyYVhOcGIyNDZJSURyWTBYQjhQVmNhY0lJY3cteE5wdGxBSEU3STVMbTdGb1htZDlCRFEtXyJ9"
+    },
+    {
+      "type": "android_upload_keystore",
+      "scope": "application",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}",
+      "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+    },
+    {
+      "type": "apns_key",
+      "scope": "team",
+      "text": "{\"type\":\"apns_key\",\"p8\":\"LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tClVla1hBNC9rL0ovR2dwcy9wUE54UHArKytoVlduU0VONGVIbG1UK2t0NjQ9Ci0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0K\",\"key_id\":\"ABCDE12345\",\"team_id\":\"CF798UCN8C\"}",
+      "plaintext": "eyJ0eXBlIjoiYXBuc19rZXkiLCJwOCI6IkxTMHRMUzFDUlVkSlRpQlFVa2xXUVZSRklFdEZXUzB0TFMwdENsVmxhMWhCTkM5ckwwb3ZSMmR3Y3k5d1VFNTRVSEFyS3l0b1ZsZHVVMFZPTkdWSWJHMVVLMnQwTmpROUNpMHRMUzB0UlU1RUlGQlNTVlpCVkVVZ1MwVlpMUzB0TFMwSyIsImtleV9pZCI6IkFCQ0RFMTIzNDUiLCJ0ZWFtX2lkIjoiQ0Y3OThVQ044QyJ9"
+    },
+    {
+      "type": "asc_api_key",
+      "scope": "team",
+      "text": "{\"type\":\"asc_api_key\",\"p8\":\"LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCjRzNTNMZjU3aUl6TnUxY1lVeW1HTFN0bzRwM3UrSkJKOTVGS1N4R0JPdlU9Ci0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0K\",\"key_id\":\"FGHIJ67890\",\"issuer_id\":\"6a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d\"}",
+      "plaintext": "eyJ0eXBlIjoiYXNjX2FwaV9rZXkiLCJwOCI6IkxTMHRMUzFDUlVkSlRpQlFVa2xXUVZSRklFdEZXUzB0TFMwdENqUnpOVE5NWmpVM2FVbDZUblV4WTFsVmVXMUhURk4wYnpSd00zVXJTa0pLT1RWR1MxTjRSMEpQZGxVOUNpMHRMUzB0UlU1RUlGQlNTVlpCVkVVZ1MwVlpMUzB0TFMwSyIsImtleV9pZCI6IkZHSElKNjc4OTAiLCJpc3N1ZXJfaWQiOiI2YTFiMmMzZC00ZTVmLTRhNmItOGM3ZC05ZTBmMWEyYjNjNGQifQ"
+    },
+    {
+      "type": "google_service_account",
+      "scope": "application",
+      "text": "{\"type\":\"google_service_account\",\"application\":\"jscheduler\",\"json\":\"eyJ0eXBlIjoic2VydmljZV9hY2NvdW50IiwicHJvamVjdF9pZCI6Im5vdC1hLXJlYWwtcHJvamVjdCJ9Cg\"}",
+      "plaintext": "eyJ0eXBlIjoiZ29vZ2xlX3NlcnZpY2VfYWNjb3VudCIsImFwcGxpY2F0aW9uIjoianNjaGVkdWxlciIsImpzb24iOiJleUowZVhCbElqb2ljMlZ5ZG1salpWOWhZMk52ZFc1MElpd2ljSEp2YW1WamRGOXBaQ0k2SW01dmRDMWhMWEpsWVd3dGNISnZhbVZqZENKOUNnIn0"
+    },
+    {
+      "type": "environment_variable",
+      "scope": "application",
+      "text": "{\"type\":\"environment_variable\",\"application\":\"jscheduler\",\"environment\":\"production\",\"name\":\"SENTRY_AUTH_TOKEN\",\"value\":\"not-a-real-sentry-token\"}",
+      "plaintext": "eyJ0eXBlIjoiZW52aXJvbm1lbnRfdmFyaWFibGUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJlbnZpcm9ubWVudCI6InByb2R1Y3Rpb24iLCJuYW1lIjoiU0VOVFJZX0FVVEhfVE9LRU4iLCJ2YWx1ZSI6Im5vdC1hLXJlYWwtc2VudHJ5LXRva2VuIn0"
+    }
+  ],
+  "bad": [
+    {
+      "name": "not-json",
+      "type": "android_upload_keystore",
+      "code": "plaintext.json",
+      "description": "Not JSON.",
+      "text": "{\"type\":\"android_upload_keystore\","
+    },
+    {
+      "name": "not-utf-8",
+      "type": "android_upload_keystore",
+      "code": "plaintext.json",
+      "description": "Bytes that are not UTF-8.",
+      "plaintext": "e_99"
+    },
+    {
+      "name": "array",
+      "type": "android_upload_keystore",
+      "code": "plaintext.json",
+      "description": "A JSON list.",
+      "text": "[{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}]"
+    },
+    {
+      "name": "missing-field",
+      "type": "android_upload_keystore",
+      "code": "plaintext.fields",
+      "description": "Without key_password.",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\"}"
+    },
+    {
+      "name": "extra-field",
+      "type": "android_upload_keystore",
+      "code": "plaintext.fields",
+      "description": "A field the type does not have.",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\",\"sha256\":\"AA\"}"
+    },
+    {
+      "name": "other-type",
+      "type": "android_upload_keystore",
+      "code": "plaintext.type",
+      "description": "The fields of a keystore under another type field.",
+      "text": "{\"type\":\"apple_provisioning_profile\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}"
+    },
+    {
+      "name": "file-empty",
+      "type": "android_upload_keystore",
+      "code": "plaintext.keystore",
+      "description": "An empty keystore.",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}"
+    },
+    {
+      "name": "file-standard-base64",
+      "type": "android_upload_keystore",
+      "code": "plaintext.keystore",
+      "description": "The keystore in standard base64 with padding.",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa/TJeqws=\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}"
+    },
+    {
+      "name": "password-number",
+      "type": "android_upload_keystore",
+      "code": "plaintext.store_password",
+      "description": "A password that is a number.",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jscheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":123456,\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}"
+    },
+    {
+      "name": "application-uppercase",
+      "type": "android_upload_keystore",
+      "code": "plaintext.application",
+      "description": "An application code in capitals.",
+      "text": "{\"type\":\"android_upload_keystore\",\"application\":\"jScheduler\",\"keystore\":\"bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws\",\"store_password\":\"not-a-real-store-password\",\"key_alias\":\"upload\",\"key_password\":\"not-a-real-key-password\"}"
+    },
+    {
+      "name": "variable-expo-public",
+      "type": "environment_variable",
+      "code": "plaintext.name",
+      "description": "An EXPO_PUBLIC_ variable: those are always plain, never sealed.",
+      "text": "{\"type\":\"environment_variable\",\"application\":\"jscheduler\",\"environment\":\"production\",\"name\":\"EXPO_PUBLIC_API_KEY\",\"value\":\"not-a-real-sentry-token\"}"
+    },
+    {
+      "name": "variable-environment",
+      "type": "environment_variable",
+      "code": "plaintext.environment",
+      "description": "An environment that is not one of the three.",
+      "text": "{\"type\":\"environment_variable\",\"application\":\"jscheduler\",\"environment\":\"staging\",\"name\":\"SENTRY_AUTH_TOKEN\",\"value\":\"not-a-real-sentry-token\"}"
+    },
+    {
+      "name": "asc-issuer",
+      "type": "asc_api_key",
+      "code": "plaintext.issuer_id",
+      "description": "An issuer id that is not a UUID.",
+      "text": "{\"type\":\"asc_api_key\",\"p8\":\"LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCjRzNTNMZjU3aUl6TnUxY1lVeW1HTFN0bzRwM3UrSkJKOTVGS1N4R0JPdlU9Ci0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0K\",\"key_id\":\"FGHIJ67890\",\"issuer_id\":\"not-a-uuid\"}"
+    },
+    {
+      "name": "unknown-type",
+      "type": "build_secret",
+      "code": "plaintext.type",
+      "description": "A type without a plaintext.",
+      "text": "{\"type\":\"build_secret\",\"value\":\"x\"}"
+    }
+  ]
+}