package store

import (
	"path/filepath"
	"testing"
)

func TestAClusterSecretIsMadeOnceAndKept(t *testing.T) {
	db, err := Open(t.Context(), filepath.Join(t.TempDir(), "s.db"))
	if err != nil {
		t.Fatal(err)
	}
	defer db.Close()
	a, err := db.ClusterSecret(t.Context(), "engine-key")
	if err != nil || len(a) != 64 {
		t.Fatalf("%q %v", a, err)
	}
	b, err := db.ClusterSecret(t.Context(), "engine-key")
	if err != nil || a != b {
		t.Errorf("a second read made a new secret: %q then %q", a, b)
	}
	if c, _ := db.ClusterSecret(t.Context(), "other"); c == a {
		t.Error("two names share a secret")
	}
}