2.1.0 (#317)

Co-authored-by: Quentin Torroba <quentin.torroba@mistral.ai>
Co-authored-by: Michel Thomazo <michel.thomazo@mistral.ai>
Co-authored-by: Clément Drouin <clement.drouin@mistral.ai>
Co-authored-by: Vincent Guilloux <vincent.guilloux@mistral.ai>
Co-authored-by: Clément Siriex <clement.sirieix@mistral.ai>
Co-authored-by: Kim-Adeline Miguel <kimadeline.miguel@mistral.ai>
Co-authored-by: Nicolas Karolak <nicolas@karolak.fr>

tests/core/test_auth_crypto.py

@@ -0,0 +1,46 @@
+from __future__ import annotations
+
+from dataclasses import asdict
+
+from cryptography.hazmat.primitives import serialization
+from cryptography.hazmat.primitives.asymmetric import rsa
+
+from vibe.core.auth import EncryptedPayload, decrypt, encrypt
+
+
+def _generate_test_key_pair() -> tuple[bytes, bytes]:
+    private_key = rsa.generate_private_key(public_exponent=65537, key_size=4096)
+    private_pem = private_key.private_bytes(
+        encoding=serialization.Encoding.PEM,
+        format=serialization.PrivateFormat.PKCS8,
+        encryption_algorithm=serialization.NoEncryption(),
+    )
+    public_pem = private_key.public_key().public_bytes(
+        encoding=serialization.Encoding.PEM,
+        format=serialization.PublicFormat.SubjectPublicKeyInfo,
+    )
+    return private_pem, public_pem
+
+
+class TestEncryptDecrypt:
+    def test_encrypt_decrypt_roundtrip(self) -> None:
+        private_pem, public_pem = _generate_test_key_pair()
+
+        plaintext = "ghp_test_token_12345"
+        encrypted = encrypt(plaintext, public_pem)
+
+        assert encrypted.encrypted_key != plaintext
+        assert encrypted.ciphertext != plaintext
+
+        decrypted = decrypt(encrypted, private_pem)
+        assert decrypted == plaintext
+
+    def test_encrypted_payload_serialization(self) -> None:
+        payload = EncryptedPayload(
+            encrypted_key="enc_key", nonce="nonce123", ciphertext="cipher"
+        )
+
+        data = asdict(payload)
+        restored = EncryptedPayload(**data)
+
+        assert restored == payload