View Javadoc
1   /*
2    * Licensed to the Apache Software Foundation (ASF) under one
3    * or more contributor license agreements.  See the NOTICE file
4    * distributed with this work for additional information
5    * regarding copyright ownership.  The ASF licenses this file
6    * to you under the Apache License, Version 2.0 (the
7    * "License"); you may not use this file except in compliance
8    * with the License.  You may obtain a copy of the License at
9    *
10   *   http://www.apache.org/licenses/LICENSE-2.0
11   *
12   * Unless required by applicable law or agreed to in writing,
13   * software distributed under the License is distributed on an
14   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
15   * KIND, either express or implied.  See the License for the
16   * specific language governing permissions and limitations
17   * under the License.
18   */
19  package org.apache.maven.scm;
20  
21  import org.junit.Test;
22  
23  import static org.junit.Assert.assertNotSame;
24  import static org.junit.Assert.assertTrue;
25  
26  public class ScmResultTest {
27  
28      private static final String PASSWORD = "secr$t";
29  
30      private static final String SCM_URL_GIT_COLON =
31              "scm:git:https://username:" + PASSWORD + "@github.com/username/repo.git";
32  
33      private static final String MOCK_ERROR_OUTPUT = "fatal: repository '" + SCM_URL_GIT_COLON + "' not found";
34  
35      private static final String MOCK_ERROR_MULTILINE_OUTPUT = "remote: Invalid username or password."
36              + System.lineSeparator() + "fatal: Authentication failed for '" + SCM_URL_GIT_COLON + "'";
37  
38      @Test
39      public void testPasswordsAreMaskedInOutput() throws Exception {
40          ScmResult result = new ScmResult("git push", "git-push failed", MOCK_ERROR_OUTPUT, false);
41          assertNotSame("Command output contains password", MOCK_ERROR_OUTPUT, result.getCommandOutput());
42          assertTrue("Command output not masked", result.getCommandOutput().contains(ScmResult.PASSWORD_PLACE_HOLDER));
43  
44          result = new ScmResult("git push", "git-push failed", MOCK_ERROR_MULTILINE_OUTPUT, false);
45          assertNotSame("Command output contains password", MOCK_ERROR_MULTILINE_OUTPUT, result.getCommandOutput());
46          assertTrue("Command output not masked", result.getCommandOutput().contains(ScmResult.PASSWORD_PLACE_HOLDER));
47      }
48  }