jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-11-01 23:11:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(relay): annotate NIP-FI test PEM fixtures for sadscan

Browse Source 
The pre-commit secret scan flags the two test-only P-256 PEM constants in bridge.rs on every commit that touches the file, and the hook runs with --no-prompt. Split each constant with concat! so the BEGIN line can carry the repository's inline sadscan:disable annotation. The string values are unchanged.

Signed-off-by: Larry <627498bd4bd1f281a16431e3c6cce3b5c25b6692798c78672298aefbf2f8f8b5@buzz.block.builderlab.xyz>
This commit is contained in:
Larry
2026-10-02 14:49:05 -04:00
parent fcf5f044b3
commit 6d31a1c40f
1 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
crates/buzz-relay/src/api/bridge.rs
View File

@@ -5073,11 +5073,13 @@ mod postgres_tests {
const HANDLER_TEST_ISSUER: &str = "https://issuer.example";
const HANDLER_TEST_AUDIENCE: &str = "https://relay.example";
const HANDLER_TEST_KID: &str = "test-key-1";
const HANDLER_TEST_EC_PEM: &str = "-----BEGIN PRIVATE KEY-----\n\
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgcnxDM4EiirH9dHUE\n\
WZc759TX4s5PAn8kO5ovXSnGxCWhRANCAARFb6ZnsfkqOOXyEhj3KBQphGKF4vTa\n\
zhebbavbZ1ZoklqkF1cGg+jTO7rONAVEzXvXUWtV6CdDV+rybiVmFP2w\n\
-----END PRIVATE KEY-----\n";
const HANDLER_TEST_EC_PEM: &str = concat!(
"-----BEGIN PRIVATE KEY-----\n", // sadscan:disable kingfisher.privkey.2 -- test-only P-256 key
"MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgcnxDM4EiirH9dHUE\n",
"WZc759TX4s5PAn8kO5ovXSnGxCWhRANCAARFb6ZnsfkqOOXyEhj3KBQphGKF4vTa\n",
"zhebbavbZ1ZoklqkF1cGg+jTO7rONAVEzXvXUWtV6CdDV+rybiVmFP2w\n",
"-----END PRIVATE KEY-----\n",
);
/// Build a NIP-FI Enforce AppState with a real injected P-256 verifier.
///
@@ -6959,11 +6961,13 @@ mod postgres_tests {
const TEST_KID: &str = "test-key-1";
// PKCS#8 private key matching TEST_JWK_X/Y — same key used by
// nip_fi_guard_rejects_crypto_invalid_assertion_before_handler_fires.
const TEST_EC_PKCS8_PEM: &str = "-----BEGIN PRIVATE KEY-----\n\
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgcnxDM4EiirH9dHUE\n\
WZc759TX4s5PAn8kO5ovXSnGxCWhRANCAARFb6ZnsfkqOOXyEhj3KBQphGKF4vTa\n\
zhebbavbZ1ZoklqkF1cGg+jTO7rONAVEzXvXUWtV6CdDV+rybiVmFP2w\n\
-----END PRIVATE KEY-----\n";
const TEST_EC_PKCS8_PEM: &str = concat!(
"-----BEGIN PRIVATE KEY-----\n", // sadscan:disable kingfisher.privkey.2 -- test-only P-256 key
"MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgcnxDM4EiirH9dHUE\n",
"WZc759TX4s5PAn8kO5ovXSnGxCWhRANCAARFb6ZnsfkqOOXyEhj3KBQphGKF4vTa\n",
"zhebbavbZ1ZoklqkF1cGg+jTO7rONAVEzXvXUWtV6CdDV+rybiVmFP2w\n",
"-----END PRIVATE KEY-----\n",
);
let jwks: JwkSet = serde_json::from_value(serde_json::json!({
"keys": [{