Initial commit: SHARED library with LFS for binary assets

relay_gateway/tests/test_manage_keys.py

@@ -0,0 +1,29 @@
+import json
+
+import pytest
+
+from relay_gateway.manage_keys import add_key, list_keys, revoke
+from relay_gateway.keys import hash_token
+
+
+def test_add_key_writes_hashed_entry(tmp_path):
+    kf = tmp_path / "relay_keys.json"
+    token = add_key(kf, name="cn", level="sre")
+    body = json.loads(kf.read_text())
+    assert hash_token(token) in body
+    assert body[hash_token(token)] == {"name": "cn", "level": "sre"}
+
+
+def test_add_key_rejects_bad_level(tmp_path):
+    with pytest.raises(ValueError):
+        add_key(tmp_path / "k.json", name="x", level="bogus")
+
+
+def test_revoke_removes_by_name(tmp_path):
+    kf = tmp_path / "relay_keys.json"
+    add_key(kf, name="cn", level="sre")
+    add_key(kf, name="keep", level="tss")
+    removed = revoke(kf, "cn")
+    assert removed == 1
+    names = {e["name"] for e in list_keys(kf)}
+    assert names == {"keep"}