Add cipher seeding with Rust SDK encryption to enable cryptographically correct test data generation (#6896)

This commit is contained in:
Mick Letofsky
2026-01-30 13:53:24 +01:00
committed by GitHub
parent 93a28eed40
commit bfc645e1c1
40 changed files with 3245 additions and 48 deletions

View File

@@ -0,0 +1,112 @@
using Bit.Seeder.Data.Enums;
using Bit.Seeder.Options;
using CommandDotNet;
namespace Bit.DbSeederUtility;
/// <summary>
/// CLI argument model for the vault-organization command.
/// Maps to <see cref="OrganizationVaultOptions"/> for the Seeder library.
/// </summary>
public class VaultOrganizationArgs : IArgumentModel
{
[Option('n', "name", Description = "Name of organization")]
public string Name { get; set; } = null!;
[Option('u', "users", Description = "Number of users to generate (minimum 1)")]
public int Users { get; set; }
[Option('d', "domain", Description = "Email domain for users")]
public string Domain { get; set; } = null!;
[Option('c', "ciphers", Description = "Number of login ciphers to create (minimum 1)")]
public int Ciphers { get; set; }
[Option('g', "groups", Description = "Number of groups to create (minimum 1)")]
public int Groups { get; set; }
[Option('m', "mix-user-statuses", Description = "Use realistic status mix (85% confirmed, 5% each invited/accepted/revoked). Requires >= 10 users.")]
public bool MixStatuses { get; set; } = true;
[Option('o', "org-structure", Description = "Org structure for collections: Traditional, Spotify, or Modern")]
public string? Structure { get; set; }
[Option('r', "region", Description = "Geographic region for names: NorthAmerica, Europe, AsiaPacific, LatinAmerica, MiddleEast, Africa, or Global")]
public string? Region { get; set; }
public void Validate()
{
if (Users < 1)
{
throw new ArgumentException("Users must be at least 1. Use another command for orgs without users.");
}
if (Ciphers < 1)
{
throw new ArgumentException("Ciphers must be at least 1. Use another command for orgs without vault data.");
}
if (Groups < 1)
{
throw new ArgumentException("Groups must be at least 1. Use another command for orgs without groups.");
}
if (!string.IsNullOrEmpty(Structure))
{
ParseOrgStructure(Structure);
}
if (!string.IsNullOrEmpty(Region))
{
ParseGeographicRegion(Region);
}
}
public OrganizationVaultOptions ToOptions() => new()
{
Name = Name,
Domain = Domain,
Users = Users,
Ciphers = Ciphers,
Groups = Groups,
RealisticStatusMix = MixStatuses,
StructureModel = ParseOrgStructure(Structure),
Region = ParseGeographicRegion(Region)
};
private static OrgStructureModel? ParseOrgStructure(string? structure)
{
if (string.IsNullOrEmpty(structure))
{
return null;
}
return structure.ToLowerInvariant() switch
{
"traditional" => OrgStructureModel.Traditional,
"spotify" => OrgStructureModel.Spotify,
"modern" => OrgStructureModel.Modern,
_ => throw new ArgumentException($"Unknown structure '{structure}'. Use: Traditional, Spotify, or Modern")
};
}
private static GeographicRegion? ParseGeographicRegion(string? region)
{
if (string.IsNullOrEmpty(region))
{
return null;
}
return region.ToLowerInvariant() switch
{
"northamerica" => GeographicRegion.NorthAmerica,
"europe" => GeographicRegion.Europe,
"asiapacific" => GeographicRegion.AsiaPacific,
"latinamerica" => GeographicRegion.LatinAmerica,
"middleeast" => GeographicRegion.MiddleEast,
"africa" => GeographicRegion.Africa,
"global" => GeographicRegion.Global,
_ => throw new ArgumentException($"Unknown region '{region}'. Use: NorthAmerica, Europe, AsiaPacific, LatinAmerica, MiddleEast, Africa, or Global")
};
}
}