From 0fae6d5867c44728c068077a0bde2e961cb47330 Mon Sep 17 00:00:00 2001
From: "Grayson, Matthew" <matthew.grayson@associates.cisa.dhs.gov>
Date: Fri, 15 Mar 2024 14:41:59 -0500
Subject: [PATCH] Delete hard-coded keys from mitmproxy files.

---
 .../worker/test_mitmproxy_sign_requests.py    | 32 ++++---------------
 1 file changed, 7 insertions(+), 25 deletions(-)

diff --git a/backend/worker/test_mitmproxy_sign_requests.py b/backend/worker/test_mitmproxy_sign_requests.py
index 2ff660e3..b2b23bc3 100644
--- a/backend/worker/test_mitmproxy_sign_requests.py
+++ b/backend/worker/test_mitmproxy_sign_requests.py
@@ -4,34 +4,16 @@
 It includes tests for different scenarios such as when a user agent and signature are set, and when they are not set.
 """
 
+# Standard Python Libraries
+import os
+
 # Third-Party Libraries
+from dotenv import load_dotenv
 from mitmproxy.test import taddons, tflow
 
 from .mitmproxy_sign_requests import SignRequests
 
-# This is a test RSA private key and not used in any deployed environment
-private_key = """-----BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDCFENGw33yGihy92pDjZQhl0C36rPJj+CvfSC8+q28hxA161QF
-NUd13wuCTUcq0Qd2qsBe/2hFyc2DCJJg0h1L78+6Z4UMR7EOcpfdUE9Hf3m/hs+F
-UR45uBJeDK1HSFHD8bHKD6kv8FPGfJTotc+2xjJwoYi+1hqp1fIekaxsyQIDAQAB
-AoGBAJR8ZkCUvx5kzv+utdl7T5MnordT1TvoXXJGXK7ZZ+UuvMNUCdN2QPc4sBiA
-QWvLw1cSKt5DsKZ8UETpYPy8pPYnnDEz2dDYiaew9+xEpubyeW2oH4Zx71wqBtOK
-kqwrXa/pzdpiucRRjk6vE6YY7EBBs/g7uanVpGibOVAEsqH1AkEA7DkjVH28WDUg
-f1nqvfn2Kj6CT7nIcE3jGJsZZ7zlZmBmHFDONMLUrXR/Zm3pR5m0tCmBqa5RK95u
-412jt1dPIwJBANJT3v8pnkth48bQo/fKel6uEYyboRtA5/uHuHkZ6FQF7OUkGogc
-mSJluOdc5t6hI1VsLn0QZEjQZMEOWr+wKSMCQQCC4kXJEsHAve77oP6HtG/IiEn7
-kpyUXRNvFsDE0czpJJBvL/aRFUJxuRK91jhjC68sA7NsKMGg5OXb5I5Jj36xAkEA
-gIT7aFOYBFwGgQAQkWNKLvySgKbAZRTeLBacpHMuQdl1DfdntvAyqpAZ0lY0RKmW
-G6aFKaqQfOXKCyWoUiVknQJAXrlgySFci/2ueKlIE1QqIiLSZ8V8OlpFLRnb1pzI
-7U1yQXnTAEFYM560yJlzUpOb1V4cScGd365tiSMvxLOvTA==
------END RSA PRIVATE KEY-----"""
-
-public_key = """-----BEGIN PUBLIC KEY-----
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCFENGw33yGihy92pDjZQhl0C3
-6rPJj+CvfSC8+q28hxA161QFNUd13wuCTUcq0Qd2qsBe/2hFyc2DCJJg0h1L78+6
-Z4UMR7EOcpfdUE9Hf3m/hs+FUR45uBJeDK1HSFHD8bHKD6kv8FPGfJTotc+2xjJw
-oYi+1hqp1fIekaxsyQIDAQAB
------END PUBLIC KEY-----"""
+load_dotenv()
 
 
 def test_user_agent_and_signature():
@@ -42,8 +24,8 @@ def test_user_agent_and_signature():
     """
     sr = SignRequests(
         key_id="crossfeed",
-        public_key=public_key,
-        private_key=private_key,
+        public_key=os.getenv("WORKER_SIGNATURE_PUBLIC_KEY"),
+        private_key=os.getenv("WORKER_SIGNATURE_PRIVATE_KEY"),
         user_agent="custom user agent",
     )
     with taddons.context():