package com.peachpasswords.ui.lock

import java.io.File
import org.junit.Assert.assertTrue
import org.junit.Test

class BiometricKeyStoreCoverageTest {
    @Test fun biometric_escrow_key_requires_strong_authenticated_hardware_use() {
        val relativePath = "app/src/main/java/com/peachpasswords/ui/lock/BiometricKeyStore.kt"
        val source = (File(relativePath).takeIf { it.exists() } ?: File("../$relativePath")).readText()

        assertTrue(source.contains("KEYSTORE = \"AndroidKeyStore\""))
        assertTrue(source.contains("TRANSFORM = \"AES/GCM/NoPadding\""))
        assertTrue(source.contains(".setUserAuthenticationRequired(true)"))
        assertTrue(source.contains(".setInvalidatedByBiometricEnrollment(true)"))
        assertTrue(source.contains("KeyProperties.AUTH_BIOMETRIC_STRONG"))
        assertTrue(source.contains("setIsStrongBoxBacked(true)"))
        assertTrue(source.contains("KeyInfo"))
        assertTrue(source.contains("securityLevel"))
        assertTrue(source.contains("biometric_key_not_hardware_backed"))
    }
}