C# (CSharp) KmsCryptoKeyProvider Exemples

Exemple #1

        public async Task GenerateCryptoKeyAsync_KmsRetrunsError_ShouldThrowException()
        {
            var config   = new Mock <IConfigurationProvider>();
            var keyBytes = Guid.NewGuid().ToByteArray();
            var key      = Guid.NewGuid().ToString();

            var kmsResponse = GetDataKeyResponse(keyBytes);

            kmsResponse.HttpStatusCode = HttpStatusCode.InternalServerError;

            var awsClient = new Mock <IAmazonKeyManagementService>();

            awsClient.Setup(x => x.GenerateDataKeyAsync(It.IsAny <GenerateDataKeyRequest>(), It.IsAny <CancellationToken>())).ReturnsAsync(kmsResponse);

            var kmsClientFactory = new Mock <IKmsClientFactory>();

            kmsClientFactory.Setup(x => x.GetGlobalClientAsync()).ReturnsAsync(awsClient.Object);

            var cryptoKeyStore = new Mock <ICryptoKeyStore>();

            cryptoKeyStore.Setup(x => x.GetAsync(_application, _tenant, key)).ReturnsAsync(null);

            var lockProvider = new Mock <ILockProvider>();

            lockProvider.Setup(x => x.TryGetLockAsync(It.IsAny <string>(), LockType.Write, It.IsAny <CancellationToken>())).ReturnsAsync(true);

            var kmsCryptoKeyProvider = new KmsCryptoKeyProvider(config.Object, kmsClientFactory.Object, cryptoKeyStore.Object, lockProvider.Object);

            var dataKey = await Assert.ThrowsAsync <CommunicationException>(async() => await kmsCryptoKeyProvider.GenerateCryptoKeyAsync(_application, _tenant, key));

            Assert.Equal(dataKey.ErrorCode, FaultCodes.KMSCommunicationError);
        }

Exemple #2

        public void GetCryptoKey_KeyInRemoteStore_ShouldReturn_CryptoKey()
        {
            byte[] keyFromRemote            = null;
            var    config                   = new Mock <IConfigurationProvider>();
            var    keyBytesInCryptoKeyStore = Guid.NewGuid().ToByteArray();
            var    key = Guid.NewGuid().ToString();

            var awsClient = new Mock <IAmazonKeyManagementService>();

            awsClient.Setup(x => x.DecryptAsync(It.IsAny <DecryptRequest>(), It.IsAny <CancellationToken>()))
            .ReturnsAsync(GetDecryptResponse(keyBytesInCryptoKeyStore));

            var kmsClientFactory = new Mock <IKmsClientFactory>();

            kmsClientFactory.Setup(x => x.GetGlobalClient()).Returns(awsClient.Object);

            var cryptoKeyStore = new Mock <ICryptoKeyStore>();

            cryptoKeyStore.Setup(x => x.Get(_application, _tenant, key))
            .Callback <string, string, string>((app, tenant, keyId) => keyFromRemote = keyBytesInCryptoKeyStore)
            .Returns(keyBytesInCryptoKeyStore);

            var lockProvider = new Mock <ILockProvider>();

            lockProvider.Setup(x => x.TryGetLockAsync(It.IsAny <string>(), LockType.Write, It.IsAny <CancellationToken>())).ReturnsAsync(true);

            var kmsCryptoKeyProvider = new KmsCryptoKeyProvider(config.Object, kmsClientFactory.Object, cryptoKeyStore.Object, lockProvider.Object);

            var dataKey = kmsCryptoKeyProvider.GenerateCryptoKey(_application, _tenant, key);

            Assert.NotNull(dataKey);
            Assert.Equal(DataKeyHelper.ConvertSecureStrToString(dataKey), DataKeyHelper.ConvertBytesToString(keyBytesInCryptoKeyStore));
        }

Exemple #3

        public void GenerateCryptoKey_NoDataInRemoteStore_ShouldReturn_NewCryptoKey()
        {
            var config   = new Mock <IConfigurationProvider>();
            var keyBytes = Guid.NewGuid().ToByteArray();
            var key      = Guid.NewGuid().ToString();

            var awsClient = new Mock <IAmazonKeyManagementService>();

            awsClient.Setup(x => x.GenerateDataKeyAsync(It.IsAny <GenerateDataKeyRequest>(), It.IsAny <CancellationToken>())).ReturnsAsync(GetDataKeyResponse(keyBytes));

            var kmsClientFactory = new Mock <IKmsClientFactory>();

            kmsClientFactory.Setup(x => x.GetGlobalClient()).Returns(awsClient.Object);

            var cryptoKeyStore = new Mock <ICryptoKeyStore>();

            cryptoKeyStore.Setup(x => x.Get(_application, _tenant, key)).Returns(() => null);

            var lockProvider = new Mock <ILockProvider>();

            lockProvider.Setup(x => x.TryGetLockAsync(It.IsAny <string>(), LockType.Write, It.IsAny <CancellationToken>())).ReturnsAsync(true);

            var kmsCryptoKeyProvider = new KmsCryptoKeyProvider(config.Object, kmsClientFactory.Object, cryptoKeyStore.Object, lockProvider.Object);

            var dataKey = kmsCryptoKeyProvider.GenerateCryptoKey(_application, _tenant, key);

            Assert.NotNull(dataKey);
        }

Exemple #4

        public void GetCryptoKey_NoKeyInRemoteStore_ShouldThrowException()
        {
            var config = new Mock <IConfigurationProvider>();
            var keyBytesInCryptoKeyStore = Guid.NewGuid().ToByteArray();
            var key = Guid.NewGuid().ToString();

            var awsClient = new Mock <IAmazonKeyManagementService>();

            awsClient.Setup(x => x.Decrypt(It.IsAny <DecryptRequest>()))
            .Returns(GetDecryptResponse(keyBytesInCryptoKeyStore));

            var kmsClientFactory = new Mock <IKmsClientFactory>();

            kmsClientFactory.Setup(x => x.GetGlobalClient()).Returns(awsClient.Object);

            var cryptoKeyStore = new Mock <ICryptoKeyStore>();

            cryptoKeyStore.Setup(x => x.Get(_application, _tenant, key)).Returns(() => null);

            var lockProvider = new Mock <ILockProvider>();

            lockProvider.Setup(x => x.TryGetLockAsync(It.IsAny <string>(), LockType.Write, It.IsAny <CancellationToken>())).ReturnsAsync(true);

            var kmsCryptoKeyProvider = new KmsCryptoKeyProvider(config.Object, kmsClientFactory.Object, cryptoKeyStore.Object, lockProvider.Object);

            var response = Assert.Throws <Tavisca.Common.Plugins.Aws.SystemException>(() => kmsCryptoKeyProvider.GetCryptoKey(_application, _tenant, key));

            Assert.Equal(response.ErrorCode, FaultCodes.CryptoKeyNotFound);
        }