Add tests to apikey model (#4626)

Signed-off-by: Kenta Kozuka <[email protected]>

pkg/model/apikey_test.go

@@ -15,10 +15,13 @@
 package model
 
 import (
+	"errors"
+	"fmt"
 	"testing"
 
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"golang.org/x/crypto/bcrypt"
 )
 
 func TestGenerateAPIKey(t *testing.T) {
@@ -49,3 +52,93 @@ func TestAPIKeyRedactSensitiveData(t *testing.T) {
 	apiKey.RedactSensitiveData()
 	assert.Equal(t, apiKey.KeyHash, "redacted")
 }
+
+func TestExtractAPIKeyID(t *testing.T) {
+	tests := []struct {
+		name        string
+		input       string
+		expected    string
+		expectedErr error
+	}{
+		{
+			name:        "Valid API Key",
+			input:       "abc.def",
+			expected:    "abc",
+			expectedErr: nil,
+		},
+		{
+			name:        "Empty Key",
+			input:       "",
+			expected:    "",
+			expectedErr: errors.New("malformed api key"),
+		},
+		{
+			name:        "Only one part",
+			input:       "abc",
+			expected:    "",
+			expectedErr: errors.New("malformed api key"),
+		},
+		{
+			name:        "Multiple periods",
+			input:       "abc.def.ghi",
+			expected:    "",
+			expectedErr: errors.New("malformed api key"),
+		},
+		{
+			name:        "Empty first part",
+			input:       ".def",
+			expected:    "",
+			expectedErr: errors.New("malformed api key"),
+		},
+		{
+			name:        "Empty second part",
+			input:       "abc.",
+			expected:    "",
+			expectedErr: errors.New("malformed api key"),
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			actual, err := ExtractAPIKeyID(tt.input)
+			assert.Equal(t, tt.expected, actual)
+			assert.Equal(t, tt.expectedErr, err)
+		})
+	}
+}
+
+func TestCompareKey(t *testing.T) {
+	password := "my-secret-key"
+	hashedPassword, _ := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+	hashedStr := string(hashedPassword)
+	apiKey := &APIKey{KeyHash: hashedStr}
+
+	tests := []struct {
+		name          string
+		input         string
+		expectedError error
+	}{
+		{
+			name:          "Valid Key",
+			input:         password,
+			expectedError: nil,
+		},
+		{
+			name:          "Invalid Key",
+			input:         "wrong-key",
+			expectedError: fmt.Errorf("wrong api key wrong-key: %w", bcrypt.ErrMismatchedHashAndPassword),
+		},
+		{
+			name:          "Empty Key",
+			input:         "",
+			expectedError: errors.New("key was empty"),
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := apiKey.CompareKey(tt.input)
+			assert.Equal(t, tt.expectedError, err)
+		})
+	}
+}