48 lines
1.4 KiB
Python
48 lines
1.4 KiB
Python
|
"""Masking helpers must never leak the original value."""
|
||
|
|
|
||
|
|
from __future__ import annotations
|
||
|
|
|
||
|
|
import pytest
|
||
|
|
|
||
|
|
from apps.profiles.privacy import mask_email, mask_emails, mask_phone, mask_phones
|
||
|
|
|
||
|
|
|
||
|
|
@pytest.mark.parametrize(
|
||
|
|
("raw", "expected"),
|
||
|
|
[
|
||
|
|
("joseph.holland@garverusa.com", "jo************@garverusa.com"),
|
||
|
|
# A single character local part is hidden completely - keeping it would
|
||
|
|
# reveal the whole address.
|
||
|
|
("a@b.com", "*@b.com"),
|
||
|
|
],
|
||
|
|
)
|
||
|
|
def test_mask_email_keeps_domain_and_hides_local_part(raw: str, expected: str) -> None:
|
||
|
|
masked = mask_email(raw)
|
||
|
|
assert masked == expected
|
||
|
|
assert masked.endswith("@" + raw.split("@")[1])
|
||
|
|
|
||
|
|
|
||
|
|
def test_mask_email_handles_garbage() -> None:
|
||
|
|
assert mask_email("not-an-email") == "***"
|
||
|
|
assert mask_email("") == "***"
|
||
|
|
|
||
|
|
|
||
|
|
def test_mask_phone_hides_the_middle() -> None:
|
||
|
|
masked = mask_phone("+19402058928")
|
||
|
|
assert masked.startswith("+1940")
|
||
|
|
assert masked.endswith("28")
|
||
|
|
assert "*" in masked
|
||
|
|
assert "20589" not in masked
|
||
|
|
|
||
|
|
|
||
|
|
def test_mask_phone_rejects_short_input() -> None:
|
||
|
|
assert mask_phone("+123") == "***"
|
||
|
|
|
||
|
|
|
||
|
|
def test_list_helpers_preserve_structure() -> None:
|
||
|
|
emails = [{"address": "a.person@corp.com", "type": "professional"}]
|
||
|
|
masked = mask_emails(emails)
|
||
|
|
assert masked[0]["type"] == "professional"
|
||
|
|
assert masked[0]["address"] != emails[0]["address"]
|
||
|
|
assert mask_phones(["+19402058928"])[0] != "+19402058928"
|