The_Great_Archive/dokploy
1
0
Fork 0
mirror of https://github.com/Dokploy/dokploy.git synced 2026-09-14 11:06:15 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity

test: cover FTP and SFTP credential redaction

Browse Source
This commit is contained in:
Furox 2026-09-04 20:34:57 +03:00 committed by Furox88
parent a52768e8f0
commit d6aef0367b
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
apps/dokploy/__test__/backups/redact-credentials.test.ts
View File

@ -27,6 +27,23 @@ describe("redactRcloneCredentials (#4621)", () => {
expect(redacted).toContain('--s3-region="us-east-1"');
});
it("should redact FTP and SFTP obscured password flags", () => {
for (const backend of ["ftp", "sftp"] as const) {
const cmd = `rclone lsf --${backend}-host=storage.example.com --${backend}-pass='obscured-secret' :${backend}:backups`;
const redacted = redactRcloneCredentials(cmd);
expect(redacted).not.toContain("obscured-secret");
expect(redacted).toContain(`--${backend}-pass="[REDACTED]"`);
}
});
it("should redact unquoted FTP and SFTP password flags", () => {
const cmd =
"rclone lsf --ftp-pass=ftp-secret --sftp-pass=sftp-secret :ftp:backups";
const redacted = redactRcloneCredentials(cmd);
expect(redacted).not.toContain("ftp-secret");
expect(redacted).not.toContain("sftp-secret");
});
it("should not modify non-credential flags", () => {
const cmd =
'rclone rcat --s3-region="eu-west-1" --s3-endpoint="https://s3.example.com" --s3-no-check-bucket :s3:bucket/file.gz';