From e97f652663da72001478a5efd00bf641409a7e10 Mon Sep 17 00:00:00 2001
From: jmtts <46958876+jmtts@users.noreply.github.com>
Date: Tue, 2 Sep 2025 12:48:19 +0200
Subject: [PATCH] test: add crypt and logger coverage

---
 tests/test_client.py | 12 ++++++++-
 tests/test_crypt.py  | 60 ++++++++++++++++++++++++++++++++++++++++++++
 tests/test_logger.py | 35 ++++++++++++++++++++++++++
 3 files changed, 106 insertions(+), 1 deletion(-)
 create mode 100644 tests/test_crypt.py
 create mode 100644 tests/test_logger.py

diff --git a/tests/test_client.py b/tests/test_client.py
index d8f8188..ea58de3 100644
--- a/tests/test_client.py
+++ b/tests/test_client.py
@@ -1,5 +1,5 @@
 from importlib.resources import files
-
+import os
 import pytest
 from unittest.mock import AsyncMock
 
@@ -16,6 +16,16 @@
 FILE_PATH = files("werk24") / "assets/DRAWING_SUCCESS.png"
 
 
+# Skip integration tests if no license is available in the environment
+pytestmark = pytest.mark.skipif(
+    not (
+        os.getenv("W24TECHREAD_AUTH_TOKEN")
+        and os.getenv("W24TECHREAD_AUTH_REGION")
+    ),
+    reason="Werk24 license not configured",
+)
+
+
 @pytest.fixture
 def drawing_bytes():
     return get_test_drawing()
diff --git a/tests/test_crypt.py b/tests/test_crypt.py
new file mode 100644
index 0000000..fa8c8d2
--- /dev/null
+++ b/tests/test_crypt.py
@@ -0,0 +1,60 @@
+import io
+
+import pytest
+
+from werk24.utils.crypt import (
+    decrypt_with_private_key,
+    encrypt_with_public_key,
+    generate_new_key_pair,
+)
+
+
+@pytest.fixture
+def key_pair():
+    """Generate a reusable RSA key pair for tests."""
+    return generate_new_key_pair(b"super-secret")
+
+
+def test_generate_new_key_pair_returns_pem(key_pair):
+    private_key, public_key = key_pair
+    assert private_key.startswith(b"-----BEGIN ENCRYPTED PRIVATE KEY-")
+    assert public_key.startswith(b"-----BEGIN PUBLIC KEY-")
+
+
+def test_generate_new_key_pair_invalid_passphrase():
+    with pytest.raises(RuntimeError):
+        generate_new_key_pair("not-bytes")
+
+
+def test_generate_new_key_pair_invalid_key_size():
+    with pytest.raises(RuntimeError):
+        generate_new_key_pair(b"pwd", key_size=1024)
+
+
+def test_encrypt_decrypt_roundtrip_bytes(key_pair):
+    private_key, public_key = key_pair
+    data = b"hello cryptography"
+    encrypted = encrypt_with_public_key(public_key, data)
+    decrypted = decrypt_with_private_key(private_key, "super-secret", encrypted)
+    assert decrypted == data
+
+
+def test_encrypt_with_public_key_accepts_file_like(key_pair):
+    _, public_key = key_pair
+    buffer = io.BytesIO(b"file-like data")
+    encrypted = encrypt_with_public_key(public_key, buffer)
+    assert isinstance(encrypted, bytes)
+
+
+def test_encrypt_with_public_key_invalid_data(key_pair):
+    _, public_key = key_pair
+    with pytest.raises(ValueError):
+        encrypt_with_public_key(public_key, 123)  # type: ignore[arg-type]
+
+
+def test_decrypt_with_private_key_incorrect_password(key_pair):
+    private_key, public_key = key_pair
+    encrypted = encrypt_with_public_key(public_key, b"secret")
+    with pytest.raises(ValueError):
+        decrypt_with_private_key(private_key, "wrong", encrypted)
+
diff --git a/tests/test_logger.py b/tests/test_logger.py
new file mode 100644
index 0000000..dfcd8d7
--- /dev/null
+++ b/tests/test_logger.py
@@ -0,0 +1,35 @@
+import logging
+
+import pytest
+
+from werk24.utils.logger import LOGGER_NAME, LogLevel, get_logger
+
+
+@pytest.fixture(autouse=True)
+def reset_logger():
+    """Ensure a clean logger for each test."""
+    get_logger.cache_clear()
+    logger = logging.getLogger(LOGGER_NAME)
+    logger.handlers.clear()
+    yield
+    logger.handlers.clear()
+    get_logger.cache_clear()
+
+
+def test_get_logger_returns_singleton():
+    logger1 = get_logger(LogLevel.INFO)
+    handlers_before = list(logger1.handlers)
+    logger2 = get_logger(LogLevel.INFO)
+    assert logger1 is logger2
+    assert logger2.handlers == handlers_before
+
+
+def test_get_logger_accepts_enum():
+    logger = get_logger(LogLevel.DEBUG)
+    assert logger.level == logging.DEBUG
+
+
+def test_get_logger_accepts_string():
+    logger = get_logger("ERROR")
+    assert logger.level == logging.ERROR
+