mirror of
https://github.com/Sea-Haven-Industries/meal-order-manager.git
synced 2026-09-30 11:13:12 +00:00
Adam Moussa
3e9a1c60bf
Keep the Flask app always-on with in-process jobs so CloudFront no longer fronts a cold-start API Gateway.
55 lines
1.8 KiB
Python
55 lines
1.8 KiB
Python
"""Tests for shared.secrets caching."""
|
|
|
|
from unittest.mock import MagicMock, patch
|
|
|
|
|
|
def test_get_parameter_refetches_after_ttl():
|
|
"""SSM parameter values expire so callers can observe rotations."""
|
|
from shared import secrets
|
|
|
|
secrets._secret_cache.clear()
|
|
secrets._parameter_cache.clear()
|
|
|
|
mock_ssm = MagicMock()
|
|
mock_ssm.get_parameter.side_effect = [
|
|
{"Parameter": {"Value": "first"}},
|
|
{"Parameter": {"Value": "second"}},
|
|
]
|
|
|
|
with patch.object(secrets, "_ssm", mock_ssm):
|
|
with patch.object(secrets, "PARAM_CACHE_TTL_SECONDS", 10.0):
|
|
with patch(
|
|
"shared.secrets.time.monotonic",
|
|
side_effect=[0.0, 5.0, 15.0],
|
|
):
|
|
assert secrets.get_parameter("/test/param") == "first"
|
|
assert secrets.get_parameter("/test/param") == "first"
|
|
assert secrets.get_parameter("/test/param") == "second"
|
|
|
|
assert mock_ssm.get_parameter.call_count == 2
|
|
|
|
|
|
def test_get_secret_refetches_after_ttl():
|
|
"""Secrets Manager values expire so a long-lived task observes rotation."""
|
|
from shared import secrets
|
|
|
|
secrets._secret_cache.clear()
|
|
secrets._parameter_cache.clear()
|
|
|
|
mock_sm = MagicMock()
|
|
mock_sm.get_secret_value.side_effect = [
|
|
{"SecretString": "a"},
|
|
{"SecretString": "b"},
|
|
]
|
|
|
|
with patch.object(secrets, "_sm", mock_sm):
|
|
with patch.object(secrets, "PARAM_CACHE_TTL_SECONDS", 10.0):
|
|
with patch(
|
|
"shared.secrets.time.monotonic",
|
|
side_effect=[0.0, 5.0, 15.0],
|
|
):
|
|
assert secrets.get_secret("arn:aws:secret") == "a"
|
|
assert secrets.get_secret("arn:aws:secret") == "a"
|
|
assert secrets.get_secret("arn:aws:secret") == "b"
|
|
|
|
assert mock_sm.get_secret_value.call_count == 2
|