From 74620d3346661cfc13d8fab5c400d59314143118 Mon Sep 17 00:00:00 2001
From: Valmo Trindade <70849974+valmojr@users.noreply.github.com>
Date: Fri, 7 Aug 2026 14:09:53 -0300
Subject: [PATCH] Cover TCP connection configuration

---
 src/tcp/config.rs | 62 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)

diff --git a/src/tcp/config.rs b/src/tcp/config.rs
index fb05a19..6d362f4 100644
--- a/src/tcp/config.rs
+++ b/src/tcp/config.rs
@@ -62,3 +62,65 @@ impl ConnectionConfig {
         }
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::ConnectionConfig;
+
+    #[test]
+    fn describes_plain_tcp_connection() {
+        let config = ConnectionConfig::Plain {
+            address: "127.0.0.1:8087".to_string(),
+        };
+
+        assert_eq!(config.connected_message(), "Connected to TCP Server");
+        assert_eq!(config.target(), "127.0.0.1:8087");
+        assert_eq!(config.describe(), "plain tcp -> 127.0.0.1:8087");
+    }
+
+    #[test]
+    fn describes_manual_mtls_connection() {
+        let config = ConnectionConfig::Mtls {
+            address: "tak.example.test:8089".to_string(),
+            server_name: "tak.example.test".to_string(),
+            ca_cert_path: "ca.pem".to_string(),
+            client_cert_path: "client.pem".to_string(),
+            client_key_path: "client.key".to_string(),
+        };
+
+        assert_eq!(
+            config.connected_message(),
+            "Connected to TAK Server via mTLS"
+        );
+        assert_eq!(config.target(), "tak.example.test:8089");
+        assert_eq!(
+            config.describe(),
+            "manual mtls -> tak.example.test:8089 (server_name=tak.example.test, ca=ca.pem, cert=client.pem, key=client.key)"
+        );
+    }
+
+    #[test]
+    fn enrollment_description_excludes_password() {
+        let config = ConnectionConfig::EnrollMtls {
+            host: "tak.example.test".to_string(),
+            server_name: "tak.example.test".to_string(),
+            enroll_port: "8446".to_string(),
+            username: "operator".to_string(),
+            password: "super-secret-password".to_string(),
+            client_uid: "armatak-test".to_string(),
+        };
+
+        assert_eq!(
+            config.connected_message(),
+            "Connected to TAK Server via enrolled mTLS certificate"
+        );
+        assert_eq!(config.target(), "tak.example.test");
+
+        let description = config.describe();
+        assert_eq!(
+            description,
+            "enroll mtls -> host=tak.example.test enroll_port=8446 server_name=tak.example.test username=operator client_uid=armatak-test"
+        );
+        assert!(!description.contains("super-secret-password"));
+    }
+}