Added tests

Author: netf

example/sm/main.go

@@ -148,7 +148,7 @@ func main() {
 
 	tableName := "UserSecretsTest"
 
-	keyURI := "aws-kms://arn:aws:kms:eu-west-2:076594877490:key/02813db0-b23a-420c-94b0-bdceb08e121b"
+	keyURI := "arn:aws:kms:eu-west-2:076594877490:key/02813db0-b23a-420c-94b0-bdceb08e121b"
 
 	// Create DynamoDB client
 	dynamoDBClient := dynamodb.NewFromConfig(cfg)

example/sm/sm

@@ -12,7 +12,6 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 //
-////////////////////////////////////////////////////////////////////////////////
 
 // Package fakeawskms provides a partial fake implementation of kmsiface.KMSAPI.
 package fakeawskms

internal/fakekms/fakekms.go

@@ -164,3 +164,31 @@ func TestVerifySignature(t *testing.T) {
 		t.Error("signature should be valid")
 	}
 }
+
+// func TestUnwrapKeyset(t *testing.T) {
+// 	kek, err := GetKEK(keyURI, true)
+// 	if err != nil {
+// 		t.Fatalf("failed to get KEK: %v", err)
+// 	}
+
+// 	kh, err := keyset.NewHandle(aead.AES256GCMKeyTemplate())
+// 	if err != nil {
+// 		t.Fatalf("failed to create keyset handle: %v", err)
+// 	}
+
+// 	dk := NewTinkDelegatedKey(kh, kek)
+// 	wrappedKeyset, err := dk.WrapKeyset()
+// 	if err != nil {
+// 		t.Fatalf("failed to wrap keyset: %v", err)
+// 	}
+
+// 	unwrappedDK, err := UnwrapKeyset(wrappedKeyset, kek)
+// 	if err != nil {
+// 		t.Fatalf("failed to unwrap keyset: %v", err)
+// 	}
+
+// 	if !cmp.Equal(dk.keysetHandle.KeysetInfo(), unwrappedDK.keysetHandle.KeysetInfo(),
+// 		cmpopts.IgnoreUnexported(tinkpb.KeysetInfo{})) {
+// 		t.Error("unwrapped keyset doesn't match the original keyset")
+// 	}
+// }