Add test for delegations update

Add a new test case in test_generate_targets_metadata to check if targets metadata is up-to-date with its delegated roles. Signed-off-by: Teodora Sechkova <[email protected]>
theupdateframework · Aug 11, 2020 · e7fecb8 · e7fecb8
1 parent f1a0fb1
commit e7fecb8
Showing 1 changed file with 29 additions and 0 deletions.
diff --git a/tests/test_repository_lib.py b/tests/test_repository_lib.py
@@ -39,6 +39,7 @@
 import sys
 import unittest
 import platform
+import copy
 
 import tuf
 import tuf.formats
@@ -368,6 +369,34 @@ def test_generate_targets_metadata(self):
                                          False)
     self.assertTrue(tuf.formats.TARGETS_SCHEMA.matches(targets_metadata))
 
+    # Test update in targets' delegations
+    keystore_path = os.path.join('repository_data', 'keystore')
+    targets_public_keypath = os.path.join(keystore_path, 'targets_key.pub')
+    targets_public_key = securesystemslib.interface.\
+        import_ed25519_publickey_from_file(targets_public_keypath)
+
+    # Add new key and threshold to delegated role
+    repository.targets('role1').add_verification_key(targets_public_key)
+    repository.targets('role1').threshold = 2
+    role1_keyids = tuf.roledb.get_role_keyids('role1')
+    role1_threshold = tuf.roledb.get_role_threshold('role1')
+    roleinfo = tuf.roledb.get_roleinfo('targets')
+    delegations = roleinfo['delegations']
+    old_delegations = copy.deepcopy(delegations)
+
+    targets_metadata  = \
+      repo_lib.generate_targets_metadata(targets_directory, target_files,
+                                         version, expiration_date, delegations,
+                                         False)
+    self.assertNotEqual(old_delegations, delegations)
+    self.assertEqual(role1_keyids,
+        targets_metadata['delegations']['roles'][0]['keyids'])
+    self.assertEqual(role1_threshold,
+        targets_metadata['delegations']['roles'][0]['threshold'])
+    for keyid in role1_keyids:
+      self.assertIn(keyid, targets_metadata['delegations']['keys'])
+
+
     # Verify that 'digest.filename' file is saved to 'targets_directory' if
     # the 'write_consistent_targets' argument is True.
     list_targets_directory = os.listdir(targets_directory)