[LD-163] Add access token encryption.

app/build.gradle

@@ -55,7 +55,6 @@ android {
         }
         debug {
             enableUnitTestCoverage true
-            testCoverageEnabled true
         }
     }
     compileOptions {
@@ -161,6 +160,9 @@ dependencies {
     // Firebase
     implementation(platform(libs.firebase.bom))
     implementation(libs.firebase.analytics)
+
+    // Security
+    implementation(libs.androidx.security)
 }
 
 tasks.withType(Test) {

app/src/main/java/com/appunite/loudius/domain/store/UserLocalDataSourceImpl.kt

@@ -17,7 +17,8 @@
 package com.appunite.loudius.domain.store
 
 import android.content.Context
-import android.content.SharedPreferences
+import androidx.security.crypto.EncryptedSharedPreferences
+import androidx.security.crypto.MasterKey
 import com.appunite.loudius.network.model.AccessToken
 
 interface UserLocalDataSource {
@@ -32,8 +33,19 @@ class UserLocalDataSourceImpl(context: Context) : UserLocalDataSource {
         private const val KEY_ACCESS_TOKEN = "access_token"
     }
 
-    private val sharedPreferences: SharedPreferences =
-        context.getSharedPreferences(FILE_NAME, Context.MODE_PRIVATE)
+    private val masterKey = MasterKey.Builder(context)
+        .setKeyScheme(MasterKey.KeyScheme.AES256_GCM)
+        .build()
+
+    private val sharedPreferences by lazy {
+        EncryptedSharedPreferences.create(
+            context,
+            FILE_NAME,
+            masterKey,
+            EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV,
+            EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM,
+        )
+    }
 
     override fun saveAccessToken(accessToken: AccessToken) {
         sharedPreferences.edit().putString(KEY_ACCESS_TOKEN, accessToken).apply()

app/src/test/java/com/appunite/loudius/di/CheckModulesTest.kt

@@ -17,13 +17,11 @@
 package com.appunite.loudius.di
 
 import android.content.Context
-import android.content.SharedPreferences
 import com.appunite.loudius.appModule
 import com.appunite.loudius.util.MainDispatcherExtension
 import com.google.firebase.analytics.FirebaseAnalytics
 import io.mockk.every
 import io.mockk.mockk
-import io.mockk.mockkClass
 import io.mockk.mockkStatic
 import org.junit.jupiter.api.Test
 import org.junit.jupiter.api.extension.ExtendWith
@@ -36,9 +34,7 @@ class CheckModulesTest : KoinTest {
 
     @Test
     fun verifyKoinApp() {
-        val mockContext = mockkClass(Context::class)
-        val mockSharedPref = mockkClass(SharedPreferences::class)
-        every { mockContext.getSharedPreferences(any(), any()) } returns mockSharedPref
+        val mockContext = mockk<Context>(relaxed = true)
 
         val mockFirebaseAnalytics = mockk<FirebaseAnalytics>()
         mockkStatic(FirebaseAnalytics::class)

app/src/test/java/com/appunite/loudius/domain/UserLocalDataSourceTest.kt

@@ -16,9 +16,7 @@
 
 package com.appunite.loudius.domain
 
-import android.content.Context
-import com.appunite.loudius.domain.store.UserLocalDataSourceImpl
-import com.appunite.loudius.fakes.FakeSharedPreferences
+import com.appunite.loudius.domain.store.UserLocalDataSource
 import io.mockk.every
 import io.mockk.mockk
 import org.junit.jupiter.api.Test
@@ -27,11 +25,11 @@ import strikt.assertions.isEmpty
 import strikt.assertions.isEqualTo
 
 class UserLocalDataSourceTest {
-    private val sharedPreferences = FakeSharedPreferences()
-    private val context = mockk<Context> {
-        every { getSharedPreferences(any(), any()) } returns sharedPreferences
+
+    private val userLocalDataSource = mockk<UserLocalDataSource> {
+        every { saveAccessToken(any()) } returns Unit
+        every { getAccessToken() } returns ""
     }
-    private val userLocalDataSource = UserLocalDataSourceImpl(context)
 
     @Test
     fun `GIVEN the app is started first time WHEN getting access token THEN token is empty`() {
@@ -42,6 +40,8 @@ class UserLocalDataSourceTest {
 
     @Test
     fun `WHEN token is set THEN token can be retrieved`() {
+        every { userLocalDataSource.getAccessToken() } returns "someToken"
+
         userLocalDataSource.saveAccessToken("someToken")
 
         val result = userLocalDataSource.getAccessToken()

gradle/libs.versions.toml

@@ -28,6 +28,7 @@ mockwebserver = "4.11.0"
 mockkAndroid = "1.13.5"
 okhttp3 = "4.12.0"
 robolectric = "4.10.3"
+securityCrypto = "1.1.0-alpha06"
 slf4jApi = "2.0.11"
 striktCore = "0.34.1"
 striktMockk = "0.34.1"
@@ -71,6 +72,7 @@ androidx-junit = { module = "androidx.test.ext:junit", version.ref = "junitVersi
 androidx-junit-ktx = { module = "androidx.test.ext:junit-ktx", version.ref = "junitVersion" }
 androidx-ktx = { group = "androidx.core", name = "core-ktx", version.ref = "ktx" }
 androidx-lifecycle = { group = "androidx.lifecycle", name = "lifecycle-runtime-ktx", version.ref = "lifecycleKtx" }
+androidx-security = { group = "androidx.security", name = "security-crypto", version.ref = "securityCrypto" }
 androidx-test-orchestartor = { group = "androidx.test", name = "orchestrator", version.ref = "testOrchestrator" }
 androidx-test-runner = { group = "androidx.test", name = "runner", version.ref = "testRunner" }
 androidx-test-uiautomator = { group = "androidx.test.uiautomator", name = "uiautomator", version.ref = "testUiAutomator" }

module-jacoco.gradle

@@ -1,5 +1,9 @@
 apply plugin: 'jacoco'
 
+jacoco {
+    toolVersion '0.8.8'
+}
+
 tasks.register('codeCoverage', JacocoReport) {
 
     reports {