Remove commands for removing accounts/devices without PQ or PNI key material

This commit is contained in:
Jon Chambers
2025-05-05 15:04:46 -04:00
committed by Jon Chambers
parent dee3723d97
commit e43487155f
13 changed files with 0 additions and 1459 deletions

View File

@@ -1,120 +0,0 @@
/*
* Copyright 2025 Signal Messenger, LLC
* SPDX-License-Identifier: AGPL-3.0-only
*/
package org.whispersystems.textsecuregcm.workers;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.ArgumentMatchers.eq;
import static org.mockito.Mockito.doReturn;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.verifyNoMoreInteractions;
import static org.mockito.Mockito.when;
import java.util.Map;
import java.util.concurrent.CompletableFuture;
import java.util.function.Consumer;
import net.sourceforge.argparse4j.inf.Namespace;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;
import org.signal.libsignal.protocol.IdentityKey;
import org.whispersystems.textsecuregcm.identity.IdentityType;
import org.whispersystems.textsecuregcm.storage.Account;
import org.whispersystems.textsecuregcm.storage.AccountsManager;
import org.whispersystems.textsecuregcm.storage.Device;
import org.whispersystems.textsecuregcm.storage.KeysManager;
import reactor.core.publisher.Flux;
class LockAccountsWithoutPniIdentityKeysCommandTest {
private AccountsManager accountsManager;
private static class TestLockAccountsWithoutPniIdentityKeysCommand extends LockAccountsWithoutPniIdentityKeysCommand {
private final CommandDependencies commandDependencies;
private final Namespace namespace;
TestLockAccountsWithoutPniIdentityKeysCommand(final AccountsManager accountsManager,
final boolean dryRun) {
commandDependencies = new CommandDependencies(accountsManager,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null);
namespace = new Namespace(Map.of(
LockAccountsWithoutPqKeysCommand.DRY_RUN_ARGUMENT, dryRun,
LockAccountsWithoutPqKeysCommand.MAX_CONCURRENCY_ARGUMENT, 16,
LockAccountsWithoutPqKeysCommand.RETRIES_ARGUMENT, 3));
}
@Override
protected CommandDependencies getCommandDependencies() {
return commandDependencies;
}
@Override
protected Namespace getNamespace() {
return namespace;
}
}
@BeforeEach
void setUp() {
accountsManager = mock(AccountsManager.class);
}
@ParameterizedTest
@ValueSource(booleans = {true, false})
void crawlAccounts(final boolean dryRun) {
final Account accountWithPniIdentityKey = mock(Account.class);
when(accountWithPniIdentityKey.getIdentityKey(IdentityType.PNI)).thenReturn(mock(IdentityKey.class));
when(accountWithPniIdentityKey.getPrimaryDevice()).thenReturn(mock(Device.class));
final Account accountWithoutPniIdentityKey = mock(Account.class);
when(accountWithoutPniIdentityKey.getIdentityKey(IdentityType.PNI)).thenReturn(null);
when(accountWithoutPniIdentityKey.getPrimaryDevice()).thenReturn(mock(Device.class));
when(accountsManager.updateAsync(any(), any())).thenAnswer(invocation -> {
final Account account = invocation.getArgument(0);
final Consumer<Account> updater = invocation.getArgument(1);
updater.accept(account);
return CompletableFuture.completedFuture(account);
});
final LockAccountsWithoutPniIdentityKeysCommand lockAccountsWithoutPniIdentityKeysCommand =
new TestLockAccountsWithoutPniIdentityKeysCommand(accountsManager, dryRun);
lockAccountsWithoutPniIdentityKeysCommand.crawlAccounts(
Flux.just(accountWithPniIdentityKey, accountWithoutPniIdentityKey));
if (!dryRun) {
verify(accountsManager).updateAsync(eq(accountWithoutPniIdentityKey), any());
verify(accountWithoutPniIdentityKey).lockAuthTokenHash();
}
verifyNoMoreInteractions(accountsManager);
}
}

View File

@@ -1,132 +0,0 @@
/*
* Copyright 2025 Signal Messenger, LLC
* SPDX-License-Identifier: AGPL-3.0-only
*/
package org.whispersystems.textsecuregcm.workers;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.ArgumentMatchers.anyByte;
import static org.mockito.ArgumentMatchers.eq;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.verifyNoMoreInteractions;
import static org.mockito.Mockito.when;
import java.util.Map;
import java.util.Optional;
import java.util.UUID;
import java.util.concurrent.CompletableFuture;
import java.util.function.Consumer;
import net.sourceforge.argparse4j.inf.Namespace;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;
import org.whispersystems.textsecuregcm.entities.KEMSignedPreKey;
import org.whispersystems.textsecuregcm.identity.IdentityType;
import org.whispersystems.textsecuregcm.storage.Account;
import org.whispersystems.textsecuregcm.storage.AccountsManager;
import org.whispersystems.textsecuregcm.storage.Device;
import org.whispersystems.textsecuregcm.storage.KeysManager;
import reactor.core.publisher.Flux;
class LockAccountsWithoutPqKeysCommandTest {
private AccountsManager accountsManager;
private KeysManager keysManager;
private static class TestLockAccountsWithoutPqKeysCommand extends LockAccountsWithoutPqKeysCommand {
private final CommandDependencies commandDependencies;
private final Namespace namespace;
TestLockAccountsWithoutPqKeysCommand(final AccountsManager accountsManager,
final KeysManager keysManager,
final boolean dryRun) {
commandDependencies = new CommandDependencies(accountsManager,
null,
null,
null,
null,
null,
keysManager,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null);
namespace = new Namespace(Map.of(
LockAccountsWithoutPqKeysCommand.DRY_RUN_ARGUMENT, dryRun,
LockAccountsWithoutPqKeysCommand.MAX_CONCURRENCY_ARGUMENT, 16,
LockAccountsWithoutPqKeysCommand.RETRIES_ARGUMENT, 3));
}
@Override
protected CommandDependencies getCommandDependencies() {
return commandDependencies;
}
@Override
protected Namespace getNamespace() {
return namespace;
}
}
@BeforeEach
void setUp() {
accountsManager = mock(AccountsManager.class);
keysManager = mock(KeysManager.class);
}
@ParameterizedTest
@ValueSource(booleans = {true, false})
void crawlAccounts(final boolean dryRun) {
final UUID accountIdentifierWithPqKeys = UUID.randomUUID();
final Account accountWithPqKeys = mock(Account.class);
when(accountWithPqKeys.getIdentifier(IdentityType.ACI)).thenReturn(accountIdentifierWithPqKeys);
final Account accountWithoutPqKeys = mock(Account.class);
when(accountWithoutPqKeys.getIdentifier(IdentityType.ACI)).thenReturn(UUID.randomUUID());
when(accountWithoutPqKeys.getPrimaryDevice()).thenReturn(mock(Device.class));
when(keysManager.getLastResort(any(), anyByte())).thenReturn(CompletableFuture.completedFuture(Optional.empty()));
when(keysManager.getLastResort(accountIdentifierWithPqKeys, Device.PRIMARY_ID))
.thenReturn(CompletableFuture.completedFuture(Optional.of(mock(KEMSignedPreKey.class))));
when(accountsManager.delete(any(), any())).thenReturn(CompletableFuture.completedFuture(null));
when(accountsManager.updateAsync(any(), any())).thenAnswer(invocation -> {
final Account account = invocation.getArgument(0);
final Consumer<Account> updater = invocation.getArgument(1);
updater.accept(account);
return CompletableFuture.completedFuture(account);
});
final LockAccountsWithoutPqKeysCommand lockAccountsWithoutPqKeysCommand =
new TestLockAccountsWithoutPqKeysCommand(accountsManager, keysManager, dryRun);
lockAccountsWithoutPqKeysCommand.crawlAccounts(Flux.just(accountWithPqKeys, accountWithoutPqKeys));
if (dryRun) {
verify(accountsManager, never()).updateAsync(any(), any());
} else {
verify(accountsManager).updateAsync(eq(accountWithoutPqKeys), any());
verifyNoMoreInteractions(accountsManager);
verify(accountWithoutPqKeys).lockAuthTokenHash();
}
}
}

View File

@@ -1,113 +0,0 @@
/*
* Copyright 2025 Signal Messenger, LLC
* SPDX-License-Identifier: AGPL-3.0-only
*/
package org.whispersystems.textsecuregcm.workers;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.verifyNoMoreInteractions;
import static org.mockito.Mockito.when;
import java.util.Map;
import java.util.concurrent.CompletableFuture;
import net.sourceforge.argparse4j.inf.Namespace;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;
import org.signal.libsignal.protocol.IdentityKey;
import org.whispersystems.textsecuregcm.identity.IdentityType;
import org.whispersystems.textsecuregcm.storage.Account;
import org.whispersystems.textsecuregcm.storage.AccountsManager;
import org.whispersystems.textsecuregcm.storage.Device;
import reactor.core.publisher.Flux;
class RemoveAccountsWithoutPniIdentityKeysCommandTest {
private AccountsManager accountsManager;
private static class TestRemoveAccountsWithoutPniIdentityKeysCommand extends RemoveAccountsWithoutPniIdentityKeysCommand {
private final CommandDependencies commandDependencies;
private final Namespace namespace;
TestRemoveAccountsWithoutPniIdentityKeysCommand(final AccountsManager accountsManager,
final boolean dryRun) {
commandDependencies = new CommandDependencies(accountsManager,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null);
namespace = new Namespace(Map.of(
LockAccountsWithoutPqKeysCommand.DRY_RUN_ARGUMENT, dryRun,
LockAccountsWithoutPqKeysCommand.MAX_CONCURRENCY_ARGUMENT, 16,
LockAccountsWithoutPqKeysCommand.RETRIES_ARGUMENT, 3));
}
@Override
protected CommandDependencies getCommandDependencies() {
return commandDependencies;
}
@Override
protected Namespace getNamespace() {
return namespace;
}
}
@BeforeEach
void setUp() {
accountsManager = mock(AccountsManager.class);
}
@ParameterizedTest
@ValueSource(booleans = {true, false})
void crawlAccounts(final boolean dryRun) {
final Account accountWithPniIdentityKey = mock(Account.class);
when(accountWithPniIdentityKey.getIdentityKey(IdentityType.PNI)).thenReturn(mock(IdentityKey.class));
when(accountWithPniIdentityKey.getPrimaryDevice()).thenReturn(mock(Device.class));
final Account lockedAccountWithoutPniIdentityKey = mock(Account.class);
when(lockedAccountWithoutPniIdentityKey.hasLockedCredentials()).thenReturn(true);
when(lockedAccountWithoutPniIdentityKey.getIdentityKey(IdentityType.PNI)).thenReturn(null);
when(lockedAccountWithoutPniIdentityKey.getPrimaryDevice()).thenReturn(mock(Device.class));
final Account unlockedAccountWithoutPniIdentityKey = mock(Account.class);
when(unlockedAccountWithoutPniIdentityKey.hasLockedCredentials()).thenReturn(false);
when(unlockedAccountWithoutPniIdentityKey.getIdentityKey(IdentityType.PNI)).thenReturn(null);
when(unlockedAccountWithoutPniIdentityKey.getPrimaryDevice()).thenReturn(mock(Device.class));
when(accountsManager.delete(any(), any())).thenReturn(CompletableFuture.completedFuture(null));
final RemoveAccountsWithoutPniIdentityKeysCommand removeAccountsWithoutPniIdentityKeysCommand =
new TestRemoveAccountsWithoutPniIdentityKeysCommand(accountsManager, dryRun);
removeAccountsWithoutPniIdentityKeysCommand.crawlAccounts(Flux.just(
accountWithPniIdentityKey, lockedAccountWithoutPniIdentityKey, unlockedAccountWithoutPniIdentityKey));
if (!dryRun) {
verify(accountsManager).delete(lockedAccountWithoutPniIdentityKey, AccountsManager.DeletionReason.ADMIN_DELETED);
}
verifyNoMoreInteractions(accountsManager);
}
}

View File

@@ -1,132 +0,0 @@
/*
* Copyright 2025 Signal Messenger, LLC
* SPDX-License-Identifier: AGPL-3.0-only
*/
package org.whispersystems.textsecuregcm.workers;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.ArgumentMatchers.anyByte;
import static org.mockito.ArgumentMatchers.eq;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.times;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;
import java.util.Map;
import java.util.Optional;
import java.util.UUID;
import java.util.concurrent.CompletableFuture;
import net.sourceforge.argparse4j.inf.Namespace;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;
import org.whispersystems.textsecuregcm.entities.KEMSignedPreKey;
import org.whispersystems.textsecuregcm.identity.IdentityType;
import org.whispersystems.textsecuregcm.storage.Account;
import org.whispersystems.textsecuregcm.storage.AccountsManager;
import org.whispersystems.textsecuregcm.storage.Device;
import org.whispersystems.textsecuregcm.storage.KeysManager;
import reactor.core.publisher.Flux;
class RemoveAccountsWithoutPqKeysCommandTest {
private AccountsManager accountsManager;
private KeysManager keysManager;
private static class TestRemoveAccountsWithoutPqKeysCommand extends RemoveAccountsWithoutPqKeysCommand {
private final CommandDependencies commandDependencies;
private final Namespace namespace;
TestRemoveAccountsWithoutPqKeysCommand(final AccountsManager accountsManager,
final KeysManager keysManager,
final int maxAccounts,
final boolean dryRun) {
commandDependencies = new CommandDependencies(accountsManager,
null,
null,
null,
null,
null,
keysManager,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null);
namespace = new Namespace(Map.of(
RemoveAccountsWithoutPqKeysCommand.DRY_RUN_ARGUMENT, dryRun,
RemoveAccountsWithoutPqKeysCommand.MAX_CONCURRENCY_ARGUMENT, 16,
RemoveAccountsWithoutPqKeysCommand.RETRIES_ARGUMENT, 3,
RemoveAccountsWithoutPqKeysCommand.MAX_ACCOUNTS_ARGUMENT, maxAccounts));
}
@Override
protected CommandDependencies getCommandDependencies() {
return commandDependencies;
}
@Override
protected Namespace getNamespace() {
return namespace;
}
}
@BeforeEach
void setUp() {
accountsManager = mock(AccountsManager.class);
keysManager = mock(KeysManager.class);
}
@ParameterizedTest
@ValueSource(booleans = {true, false})
void crawlAccounts(final boolean dryRun) {
final UUID accountIdentifierWithPqKeys = UUID.randomUUID();
final Account accountWithPqKeys = mock(Account.class);
when(accountWithPqKeys.getIdentifier(IdentityType.ACI)).thenReturn(accountIdentifierWithPqKeys);
when(accountWithPqKeys.getPrimaryDevice()).thenReturn(mock(Device.class));
when(accountWithPqKeys.hasLockedCredentials()).thenReturn(true);
when(keysManager.getLastResort(any(), anyByte())).thenReturn(CompletableFuture.completedFuture(Optional.empty()));
when(keysManager.getLastResort(accountIdentifierWithPqKeys, Device.PRIMARY_ID))
.thenReturn(CompletableFuture.completedFuture(Optional.of(mock(KEMSignedPreKey.class))));
when(accountsManager.delete(any(), any())).thenReturn(CompletableFuture.completedFuture(null));
final int maxAccounts = 5;
final RemoveAccountsWithoutPqKeysCommand removeAccountsWithoutPqKeysCommand =
new TestRemoveAccountsWithoutPqKeysCommand(accountsManager, keysManager, maxAccounts, dryRun);
removeAccountsWithoutPqKeysCommand.crawlAccounts(Flux.concat(
Flux.just(accountWithPqKeys),
Flux.generate(sink -> {
final Account accountWithoutPqKeys = mock(Account.class);
when(accountWithoutPqKeys.getIdentifier(IdentityType.ACI)).thenReturn(UUID.randomUUID());
when(accountWithoutPqKeys.getPrimaryDevice()).thenReturn(mock(Device.class));
when(accountWithoutPqKeys.hasLockedCredentials()).thenReturn(true);
sink.next(accountWithoutPqKeys);
})));
if (dryRun) {
verify(accountsManager, never()).delete(any(), any());
} else {
verify(accountsManager, times(maxAccounts)).delete(any(), eq(AccountsManager.DeletionReason.ADMIN_DELETED));
verify(accountsManager, never()).delete(eq(accountWithPqKeys), any());
}
}
}

View File

@@ -1,143 +0,0 @@
/*
* Copyright 2025 Signal Messenger, LLC
* SPDX-License-Identifier: AGPL-3.0-only
*/
package org.whispersystems.textsecuregcm.workers;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.ArgumentMatchers.anyByte;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.verifyNoMoreInteractions;
import static org.mockito.Mockito.when;
import java.util.List;
import java.util.Map;
import java.util.Optional;
import java.util.UUID;
import java.util.concurrent.CompletableFuture;
import net.sourceforge.argparse4j.inf.Namespace;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;
import org.whispersystems.textsecuregcm.entities.ECSignedPreKey;
import org.whispersystems.textsecuregcm.identity.IdentityType;
import org.whispersystems.textsecuregcm.storage.Account;
import org.whispersystems.textsecuregcm.storage.AccountsManager;
import org.whispersystems.textsecuregcm.storage.Device;
import org.whispersystems.textsecuregcm.storage.KeysManager;
import reactor.core.publisher.Flux;
class RemoveLinkedDevicesWithoutPniKeysCommandTest {
private AccountsManager accountsManager;
private KeysManager keysManager;
private static class TestRemoveLinkedDevicesWithoutPniKeysCommand extends RemoveLinkedDevicesWithoutPniKeysCommand {
private final CommandDependencies commandDependencies;
private final Namespace namespace;
TestRemoveLinkedDevicesWithoutPniKeysCommand(final AccountsManager accountsManager,
final KeysManager keysManager,
final boolean dryRun) {
commandDependencies = new CommandDependencies(accountsManager,
null,
null,
null,
null,
null,
keysManager,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null);
namespace = new Namespace(Map.of(
RemoveLinkedDevicesWithoutPqKeysCommand.DRY_RUN_ARGUMENT, dryRun,
RemoveLinkedDevicesWithoutPqKeysCommand.MAX_CONCURRENCY_ARGUMENT, 16,
RemoveLinkedDevicesWithoutPqKeysCommand.RETRIES_ARGUMENT, 3));
}
@Override
protected CommandDependencies getCommandDependencies() {
return commandDependencies;
}
@Override
protected Namespace getNamespace() {
return namespace;
}
}
@BeforeEach
void setUp() {
accountsManager = mock(AccountsManager.class);
keysManager = mock(KeysManager.class);
}
@ParameterizedTest
@ValueSource(booleans = {true, false})
void crawlAccounts(final boolean dryRun) {
final Account accountWithoutLinkedDevices = mock(Account.class);
when(accountWithoutLinkedDevices.getDevices()).thenReturn(List.of(mock(Device.class)));
final Device primaryDevice = mock(Device.class);
when(primaryDevice.isPrimary()).thenReturn(true);
final byte deviceIdWithPniKey = Device.PRIMARY_ID + 1;
final Device linkedDeviceWithPniKey = mock(Device.class);
when(linkedDeviceWithPniKey.isPrimary()).thenReturn(false);
when(linkedDeviceWithPniKey.getId()).thenReturn(deviceIdWithPniKey);
final UUID pniWithLinkedDeviceWithPniKey = UUID.randomUUID();
final Account accountWithLinkedDeviceWithPniKey = mock(Account.class);
when(accountWithLinkedDeviceWithPniKey.getIdentifier(IdentityType.PNI)).thenReturn(pniWithLinkedDeviceWithPniKey);
when(accountWithLinkedDeviceWithPniKey.getDevices()).thenReturn(List.of(primaryDevice, linkedDeviceWithPniKey));
final byte deviceIdWithoutPniKey = deviceIdWithPniKey + 1;
final Device linkedDeviceWithoutPniKey = mock(Device.class);
when(linkedDeviceWithoutPniKey.isPrimary()).thenReturn(false);
when(linkedDeviceWithoutPniKey.getId()).thenReturn(deviceIdWithoutPniKey);
final Account accountWithLinkedDeviceWithoutPniKey = mock(Account.class);
when(accountWithLinkedDeviceWithoutPniKey.getDevices()).thenReturn(List.of(primaryDevice, linkedDeviceWithoutPniKey));
when(accountsManager.removeDevice(any(), anyByte())).thenAnswer(invocation -> {
final Account account = invocation.getArgument(0);
return CompletableFuture.completedFuture(account);
});
when(keysManager.getEcSignedPreKey(any(), anyByte()))
.thenReturn(CompletableFuture.completedFuture(Optional.empty()));
when(keysManager.getEcSignedPreKey(pniWithLinkedDeviceWithPniKey, deviceIdWithPniKey))
.thenReturn(CompletableFuture.completedFuture(Optional.of(mock(ECSignedPreKey.class))));
final RemoveLinkedDevicesWithoutPniKeysCommand removeLinkedDevicesWithoutPniKeysCommand =
new TestRemoveLinkedDevicesWithoutPniKeysCommand(accountsManager, keysManager, dryRun);
removeLinkedDevicesWithoutPniKeysCommand.crawlAccounts(Flux.just(
accountWithoutLinkedDevices, accountWithLinkedDeviceWithPniKey, accountWithLinkedDeviceWithoutPniKey));
if (!dryRun) {
verify(accountsManager).removeDevice(accountWithLinkedDeviceWithoutPniKey, deviceIdWithoutPniKey);
}
verifyNoMoreInteractions(accountsManager);
}
}

View File

@@ -1,130 +0,0 @@
/*
* Copyright 2025 Signal Messenger, LLC
* SPDX-License-Identifier: AGPL-3.0-only
*/
package org.whispersystems.textsecuregcm.workers;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.ArgumentMatchers.anyByte;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.verifyNoMoreInteractions;
import static org.mockito.Mockito.when;
import java.util.List;
import java.util.Map;
import java.util.UUID;
import java.util.concurrent.CompletableFuture;
import net.sourceforge.argparse4j.inf.Namespace;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;
import org.whispersystems.textsecuregcm.identity.IdentityType;
import org.whispersystems.textsecuregcm.storage.Account;
import org.whispersystems.textsecuregcm.storage.AccountsManager;
import org.whispersystems.textsecuregcm.storage.Device;
import org.whispersystems.textsecuregcm.storage.KeysManager;
import reactor.core.publisher.Flux;
class RemoveLinkedDevicesWithoutPqKeysCommandTest {
private AccountsManager accountsManager;
private KeysManager keysManager;
private static class TestRemoveLinkedDevicesWithoutPqKeysCommand extends RemoveLinkedDevicesWithoutPqKeysCommand {
private final CommandDependencies commandDependencies;
private final Namespace namespace;
TestRemoveLinkedDevicesWithoutPqKeysCommand(final AccountsManager accountsManager,
final KeysManager keysManager,
final boolean dryRun) {
commandDependencies = new CommandDependencies(accountsManager,
null,
null,
null,
null,
null,
keysManager,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null,
null);
namespace = new Namespace(Map.of(
RemoveLinkedDevicesWithoutPqKeysCommand.DRY_RUN_ARGUMENT, dryRun,
RemoveLinkedDevicesWithoutPqKeysCommand.MAX_CONCURRENCY_ARGUMENT, 16,
RemoveLinkedDevicesWithoutPqKeysCommand.RETRIES_ARGUMENT, 3));
}
@Override
protected CommandDependencies getCommandDependencies() {
return commandDependencies;
}
@Override
protected Namespace getNamespace() {
return namespace;
}
}
@BeforeEach
void setUp() {
accountsManager = mock(AccountsManager.class);
keysManager = mock(KeysManager.class);
}
@ParameterizedTest
@ValueSource(booleans = {true, false})
void crawlAccounts(final boolean dryRun) {
final UUID accountIdentifier = UUID.randomUUID();
final byte deviceIdWithPqKeys = Device.PRIMARY_ID + 1;
final byte deviceIdWithoutPqKeys = deviceIdWithPqKeys + 1;
final Device primaryDevice = mock(Device.class);
when(primaryDevice.isPrimary()).thenReturn(true);
when(primaryDevice.getId()).thenReturn(Device.PRIMARY_ID);
final Device linkedDeviceWithPqKeys = mock(Device.class);
when(linkedDeviceWithPqKeys.isPrimary()).thenReturn(false);
when(linkedDeviceWithPqKeys.getId()).thenReturn(deviceIdWithPqKeys);
final Device linkedDeviceWithoutPqKeys = mock(Device.class);
when(linkedDeviceWithoutPqKeys.isPrimary()).thenReturn(false);
when(linkedDeviceWithoutPqKeys.getId()).thenReturn(deviceIdWithoutPqKeys);
final Account account = mock(Account.class);
when(account.getIdentifier(IdentityType.ACI)).thenReturn(accountIdentifier);
when(account.getDevices()).thenReturn(List.of(primaryDevice, linkedDeviceWithPqKeys, linkedDeviceWithoutPqKeys));
when(keysManager.getPqEnabledDevices(accountIdentifier))
.thenReturn(CompletableFuture.completedFuture(List.of(deviceIdWithPqKeys)));
when(accountsManager.removeDevice(any(), anyByte()))
.thenAnswer(invocation -> CompletableFuture.completedFuture(invocation.getArgument(0)));
final RemoveLinkedDevicesWithoutPqKeysCommand removeLinkedDevicesWithoutPqKeysCommand =
new TestRemoveLinkedDevicesWithoutPqKeysCommand(accountsManager, keysManager, dryRun);
removeLinkedDevicesWithoutPqKeysCommand.crawlAccounts(Flux.just(account));
if (dryRun) {
verify(accountsManager, never()).removeDevice(any(), anyByte());
} else {
verify(accountsManager).removeDevice(account, deviceIdWithoutPqKeys);
verifyNoMoreInteractions(accountsManager);
}
}
}