encrypt-decrypt.sh

#!/usr/bin/env bash
set -exuo pipefail

APP_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null && pwd)"

: "${DEMO_KAS_ALLOWLIST:=http://localhost:65432}"
: "${DEMO_OIDC_ENDPOINT:=http://localhost:65432/auth/realms/tdf}"
: "${DEMO_KAS_URI:=http://localhost:65432/api/kas}"
: "${DEMO_WEB_APP_URI:=http://localhost:65432/}"

cd "$APP_DIR"

counter=0

_nano_test() {
  counter=$((counter + 1))
  plain="./sample-${counter}.txt"
  echo "Hello World ${counter}" >"./${plain}"
  npx "$1" --log-level DEBUG \
    --kasEndpoint "${DEMO_KAS_URI}" \
    --allowList "${DEMO_KAS_ALLOWLIST}" \
    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
    --auth tdf-client:123-456 \
    --output sample.txt.ntdf \
    encrypt "${plain}" \
    --attributes https://example.com/attr/Classification/value/S,https://example.com/attr/COI/value/PRX

  [ -f sample.txt.ntdf ]

  npx "$2" --log-level DEBUG \
    --kasEndpoint "${DEMO_KAS_URI}" \
    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
    --auth tdf-client:123-456 \
    --output sample_out.txt \
    decrypt sample.txt.ntdf

  [ -f sample_out.txt ] && diff "${plain}" sample_out.txt

  echo "Roundtrip nanotdf $1 -> $2 successful!"
  rm -f "${plain}" sample.txt.ntdf sample_out.txt
}

_nano_test @opentdf/ctl @opentdf/ctl

_tdf3_test() {
  counter=$((counter + 1))
  plain="./sample-${counter}.txt"
  echo "Hello World ${counter}" >"${plain}"
  npx "$1" --log-level DEBUG \
    --kasEndpoint "${DEMO_KAS_URI}" \
    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
    --auth tdf-client:123-456 \
    --output sample.txt.tdf \
    encrypt "${plain}" \
    --containerType tdf3 \
    --attributes https://example.com/attr/Classification/value/S,https://example.com/attr/COI/value/PRX

  [ -f sample.txt.tdf ]

  npx "$2" --log-level DEBUG \
    --kasEndpoint "${DEMO_KAS_URI}" \
    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
    --auth tdf-client:123-456 \
    --output sample_out.txt \
    --containerType tdf3 \
    decrypt sample.txt.tdf

  [ -f sample_out.txt ] && diff "${plain}" sample_out.txt

  echo "Roundtrip tdf3 $1 -> $2 successful!"
  rm -f "${plain}" sample.txt.tdf sample_out.txt
}

_tdf3_test @opentdf/ctl @opentdf/ctl