From e3f7eadf53693bbf9b049f19a90fdedf2a2e9aa5 Mon Sep 17 00:00:00 2001
From: Arnold Galovics <galovicsarnold@gmail.com>
Date: Sat, 25 Nov 2023 16:05:52 +0100
Subject: [PATCH] Downgraded Liquibase since there's a bug where the database
 encryption task runs twice

---
 .../org.apache.fineract.dependencies.gradle   |  2 +-
 .../security/utils/EncryptionUtilTest.java    | 52 +++++++++++++++++++
 2 files changed, 53 insertions(+), 1 deletion(-)
 create mode 100644 fineract-core/src/test/java/org/apache/fineract/infrastructure/security/utils/EncryptionUtilTest.java

diff --git a/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle b/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
index 35c6423c6..29364efa8 100644
--- a/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
+++ b/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
@@ -203,7 +203,7 @@ dependencyManagement {
             exclude 'jakarta.activation:jakarta.activation-api'
         }
 
-        dependency ('org.liquibase:liquibase-core:4.25.0') {
+        dependency ('org.liquibase:liquibase-core:4.23.0') {
             exclude 'javax.xml.bind:jaxb-api'
         }
 
diff --git a/fineract-core/src/test/java/org/apache/fineract/infrastructure/security/utils/EncryptionUtilTest.java b/fineract-core/src/test/java/org/apache/fineract/infrastructure/security/utils/EncryptionUtilTest.java
new file mode 100644
index 000000000..5ddd1e809
--- /dev/null
+++ b/fineract-core/src/test/java/org/apache/fineract/infrastructure/security/utils/EncryptionUtilTest.java
@@ -0,0 +1,52 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.fineract.infrastructure.security.utils;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+
+class EncryptionUtilTest {
+
+    @Test
+    public void testEncryptDecryptWorks() {
+        // given
+        String encryptionType = "AES/CBC/PKCS5Padding";
+        String masterPassword = "fineract";
+        String data = "postgres";
+        String encrypted = EncryptionUtil.encryptToBase64(encryptionType, masterPassword, data);
+        assertThat(encrypted).isNotEqualTo(data);
+        // when
+        String result = EncryptionUtil.decryptFromBase64(encryptionType, masterPassword, encrypted);
+        // then
+        assertThat(result).isEqualTo(data);
+    }
+
+    @Test
+    public void testDecryptWorks() {
+        // given
+        String encryptionType = "AES/CBC/PKCS5Padding";
+        String masterPassword = "fineract";
+        String data = "Oy/ah382msZT9ZAYBmQgsIXJYOdkB5MoF+3XMkQVkcZTduNSam3+0VpGYOGyXojs";
+        // when
+        String result = EncryptionUtil.decryptFromBase64(encryptionType, masterPassword, data);
+        // then
+        assertThat(result).isEqualTo("postgres");
+    }
+}