feat: Validate metadata signature

__tests__/api-mock.ts

@@ -6,17 +6,21 @@
 import { afterAll, afterEach, beforeAll } from 'vitest'
 import { setupServer } from 'msw/node'
 import { http, HttpResponse } from 'msw'
-import { rootFolderMetadata, serverPublicKey, subfolderMetadata } from './consts.spec'
+import { rootFolderMetadata, rootFolderMetadataSignature, serverPublicKey, subfolderMetadata, subFolderMetadataSignature } from './consts.spec'
 
 export const restHandlers = [
 	http.get('http://nextcloud.local//ocs/v2.php/apps/end_to_end_encryption/api/v2/server-key', () => {
 		return HttpResponse.json({ ocs: { data: { 'public-key': serverPublicKey } } })
 	}),
 	http.get('http://nextcloud.local//ocs/v2.php/apps/end_to_end_encryption/api/v2/meta-data/89', () => {
-		return HttpResponse.json({ ocs: { data: { 'meta-data': JSON.stringify(rootFolderMetadata) } } })
+		const response = HttpResponse.json({ ocs: { data: { 'meta-data': JSON.stringify(rootFolderMetadata) } } })
+		response.headers.set('x-nc-e2ee-signature', rootFolderMetadataSignature)
+		return response
 	}),
 	http.get('http://nextcloud.local//ocs/v2.php/apps/end_to_end_encryption/api/v2/meta-data/266', () => {
-		return HttpResponse.json({ ocs: { data: { 'meta-data': JSON.stringify(subfolderMetadata) } } })
+		const response = HttpResponse.json({ ocs: { data: { 'meta-data': JSON.stringify(subfolderMetadata) } } })
+		response.headers.set('x-nc-e2ee-signature', subFolderMetadataSignature)
+		return response
 	}),
 ]
 

__tests__/consts.spec.ts

@@ -99,6 +99,9 @@ export const subfolderMetadataInfo: MetadataInfo = {
 	folders: {},
 }
 
+export const rootFolderMetadataSignature = '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'
+export const subFolderMetadataSignature = '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'
+
 export const encryptedFileContent = 'O13d2Y5O7qYDTerGfZyRwHKWcEktQQiJBm5rWzY='
 
 export const propFindResponse = `<?xml version="1.0"?>