Require that unidentified access keys be exactly 16 bytes

This commit is contained in:
Jon Chambers
2021-10-25 17:31:20 -04:00
committed by Jon Chambers
parent 966d4e29d4
commit e6237480f8
3 changed files with 23 additions and 0 deletions

View File

@@ -1673,6 +1673,21 @@ class AccountControllerTest {
assertThat(response.getStatus()).isEqualTo(204);
}
@Test
void testSetAccountAttributesBadUnidentifiedKeyLength() {
final AccountAttributes attributes = new AccountAttributes(false, 2222, null, null, false, null);
attributes.setUnidentifiedAccessKey(new byte[7]);
Response response =
resources.getJerseyTest()
.target("/v1/accounts/attributes/")
.request()
.header("Authorization", AuthHelper.getAuthHeader(AuthHelper.VALID_UUID, AuthHelper.VALID_PASSWORD))
.put(Entity.json(attributes));
assertThat(response.getStatus()).isEqualTo(422);
}
@Test
void testDeleteAccount() throws InterruptedException {
Response response =