"""

Unit tests for encryption and user persistence (no Streamlit UI).

"""

from __future__ import annotations

import os

import tempfile

import unittest

from pathlib import Path

from unittest import mock

# Ensure repo root on path

import sys

sys.path.insert(0, str(Path(__file__).resolve().parent.parent))

class TestEncryption(unittest.TestCase):

def test_development_key_file_roundtrip(self) -> None:

with tempfile.TemporaryDirectory() as tmp:

key_file = Path(tmp) / "test.key"

from cryptography.fernet import Fernet

key_file.write_text(Fernet.generate_key().decode(), encoding="utf-8")

env = {

"ENV": "development",

"DEV_ENCRYPTION_KEY_PATH": str(key_file),

}

with mock.patch.dict(os.environ, env, clear=False):

import importlib

import config as cfg

import utils.encryption as enc

importlib.reload(cfg)

importlib.reload(enc)

f = enc.get_master_fernet()

token = enc.encrypt_for_storage("user-secret-key", f)

plain = enc.decrypt_from_storage(token, f)

self.assertEqual(plain, "user-secret-key")

def test_production_env_key(self) -> None:

from cryptography.fernet import Fernet

key = Fernet.generate_key().decode()

env = {"ENV": "production", "ENCRYPTION_KEY": key}

with mock.patch.dict(os.environ, env, clear=False):

import importlib

import config as cfg

import utils.encryption as enc

importlib.reload(cfg)

importlib.reload(enc)

self.assertTrue(cfg.IS_PRODUCTION)

f = enc.get_master_fernet()

self.assertIsNotNone(f.encrypt(b"test"))

class TestUserDatabase(unittest.TestCase):

def test_create_and_fetch_user(self) -> None:

with tempfile.TemporaryDirectory() as tmp:

db_path = Path(tmp) / "test.db"

key_file = Path(tmp) / "dev.key"

from cryptography.fernet import Fernet

key_file.write_text(Fernet.generate_key().decode(), encoding="utf-8")

env = {

"ENV": "development",

"DATABASE_PATH": str(db_path),

"DEV_ENCRYPTION_KEY_PATH": str(key_file),

}

with mock.patch.dict(os.environ, env, clear=False):

import importlib

import config as cfg

import database.db_manager as dbm

import utils.encryption as enc

importlib.reload(cfg)

importlib.reload(enc)

importlib.reload(dbm)

user = dbm.create_user(

username="alice",

email="alice@test.com",

name="Alice",

password_hash="$2b$12$fakehashfortestonlyxxxxxxxxxxxxxxx",

)

loaded = dbm.get_user_by_username("alice")

self.assertIsNotNone(loaded)

assert loaded is not None

self.assertEqual(loaded.user_id, user.user_id)

# Per-user key decrypts with master

uf = enc.get_user_fernet(loaded.encryption_key)

self.assertIsNotNone(uf.encrypt(b"payload"))

if __name__ == "__main__":

unittest.main()