bitwarden_send/

edit.rs

use bitwarden_core::{
    ApiError, MissingFieldError,
    key_management::{KeySlotIds, SymmetricKeySlotId},
};
use bitwarden_crypto::{
    CompositeEncryptable, CryptoError, IdentifyKey, KeyStore, KeyStoreContext, OctetStreamBytes,
    PrimitiveEncryptable,
};
use bitwarden_encoding::B64Url;
use bitwarden_error::bitwarden_error;
use bitwarden_state::repository::{Repository, RepositoryError};
use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};
use thiserror::Error;
#[cfg(feature = "wasm")]
use tsify::Tsify;
use uuid::Uuid;
#[cfg(feature = "wasm")]
use wasm_bindgen::prelude::*;

use crate::{
    EmptyEmailListError, Send, SendAuthType, SendId, SendView, SendViewType,
    error::{ItemNotFoundError, SendParseError},
    send_client::SendClient,
};

#[allow(missing_docs)]
#[bitwarden_error(flat)]
#[derive(Debug, Error)]
pub enum EditSendError {
    #[error(transparent)]
    ItemNotFound(#[from] ItemNotFoundError),
    #[error(transparent)]
    Crypto(#[from] CryptoError),
    #[error(transparent)]
    Api(#[from] ApiError),
    #[error(transparent)]
    EmptyEmailList(#[from] EmptyEmailListError),
    #[error(transparent)]
    MissingField(#[from] MissingFieldError),
    #[error(transparent)]
    Repository(#[from] RepositoryError),
    #[error(transparent)]
    Uuid(#[from] uuid::Error),
    #[error(transparent)]
    SendParse(#[from] SendParseError),
    #[error("Server returned Send with ID {returned:?} but expected {expected}")]
    IdMismatch {
        expected: Uuid,
        returned: Option<Uuid>,
    },
}

/// Controls how `bw send edit` updates the auth on an existing Send.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(tag = "type", rename_all = "camelCase")]
#[cfg_attr(feature = "uniffi", derive(uniffi::Enum))]
#[cfg_attr(feature = "wasm", derive(Tsify), tsify(into_wasm_abi, from_wasm_abi))]
pub enum AuthEdit {
    /// Keep the existing auth on the Send.
    Preserve,
    /// Replace the existing auth. Pass `SendAuthType::None` to strip auth entirely.
    Set {
        /// The new auth configuration to apply.
        auth: SendAuthType,
    },
}

/// Request model for editing an existing Send.
#[derive(Serialize, Deserialize, Debug)]
#[serde(rename_all = "camelCase")]
#[cfg_attr(feature = "wasm", derive(Tsify), tsify(into_wasm_abi, from_wasm_abi))]
pub struct SendEditRequest {
    /// The name of the Send.
    pub name: String,
    /// Optional notes visible to the sender.
    pub notes: Option<String>,

    /// The type and content of the Send.
    pub view_type: SendViewType,

    /// Maximum number of times the Send can be accessed.
    pub max_access_count: Option<u32>,
    /// Whether the Send is disabled and cannot be accessed.
    pub disabled: bool,
    /// Whether to hide the sender's email from recipients.
    pub hide_email: bool,

    /// Date and time when the Send will be permanently deleted.
    pub deletion_date: DateTime<Utc>,
    /// Optional date and time when the Send expires and can no longer be accessed.
    pub expiration_date: Option<DateTime<Utc>>,

    /// Authentication for accessing this Send. Use `AuthEdit::Preserve` to keep the
    /// existing auth on partial edits.
    pub auth: AuthEdit,
}

/// Internal helper carrying the send key and resolved auth needed for encryption.
#[derive(Debug)]
struct SendEditRequestWithKey {
    request: SendEditRequest,
    send_key: String,
    resolved_auth: ResolvedAuth,
}

/// Resolved auth for an encrypted edit request, built at the `edit_send` boundary.
#[derive(Debug)]
enum ResolvedAuth {
    /// Write this `SendAuthType` verbatim. Already `validate()`-d.
    Overwrite(SendAuthType),
    /// Forward the existing `authType` only. The server retains the stored password
    /// hash and email list when `password`/`emails` are omitted from the request.
    Preserve(crate::AuthType),
}

impl
    CompositeEncryptable<
        KeySlotIds,
        SymmetricKeySlotId,
        bitwarden_api_api::models::SendRequestModel,
    > for SendEditRequestWithKey
{
    fn encrypt_composite(
        &self,
        ctx: &mut KeyStoreContext<KeySlotIds>,
        key: SymmetricKeySlotId,
    ) -> Result<bitwarden_api_api::models::SendRequestModel, CryptoError> {
        // Decode the send key from the existing send
        let k = B64Url::try_from(self.send_key.as_str())
            .map_err(|_| CryptoError::InvalidKey)?
            .as_bytes()
            .to_vec();

        let send_key = Send::derive_shareable_key(ctx, &k)?;

        let (send_type, file, text, data) = self
            .request
            .view_type
            .clone()
            .encrypt_composite(ctx, send_key)?;

        let (auth_type, password, emails) = match &self.resolved_auth {
            ResolvedAuth::Overwrite(auth) => {
                let (password, emails) = auth.auth_data(&k);
                (auth.auth_type(), password, emails)
            }
            ResolvedAuth::Preserve(auth_type) => (*auth_type, None, None),
        };

        Ok(bitwarden_api_api::models::SendRequestModel {
            r#type: Some(send_type),
            auth_type: Some(auth_type.into()),
            file_length: None,
            name: Some(self.request.name.encrypt(ctx, send_key)?.to_string()),
            notes: self
                .request
                .notes
                .as_ref()
                .map(|n| n.encrypt(ctx, send_key))
                .transpose()?
                .map(|e| e.to_string()),
            // Encrypt the send key itself with the user key
            key: OctetStreamBytes::from(k).encrypt(ctx, key)?.to_string(),
            max_access_count: self.request.max_access_count.map(|c| c as i32),
            expiration_date: self.request.expiration_date.map(|d| d.to_rfc3339()),
            deletion_date: self.request.deletion_date.to_rfc3339(),
            file,
            text,
            data,
            password,
            emails,
            disabled: self.request.disabled,
            hide_email: Some(self.request.hide_email),
        })
    }
}

impl IdentifyKey<SymmetricKeySlotId> for SendEditRequestWithKey {
    fn key_identifier(&self) -> SymmetricKeySlotId {
        SymmetricKeySlotId::User
    }
}

async fn edit_send<R: Repository<Send> + ?Sized>(
    key_store: &KeyStore<KeySlotIds>,
    api_client: &bitwarden_api_api::apis::ApiClient,
    repository: &R,
    send_id: SendId,
    request: SendEditRequest,
) -> Result<SendView, EditSendError> {
    let id = send_id.to_string();

    let existing_send = repository.get(send_id).await?.ok_or(ItemNotFoundError)?;

    let resolved_auth = match &request.auth {
        AuthEdit::Set { auth } => {
            auth.validate()?;
            ResolvedAuth::Overwrite(auth.clone())
        }
        AuthEdit::Preserve => ResolvedAuth::Preserve(existing_send.auth_type),
    };

    // Decrypt to get the key - we only need the key field
    let existing_send_view: SendView = key_store.decrypt(&existing_send)?;
    let send_key = existing_send_view.key.ok_or(MissingFieldError("key"))?;

    // Create the wrapper with the key from the existing send
    let request_with_key = SendEditRequestWithKey {
        request,
        send_key,
        resolved_auth,
    };

    let send_request = key_store.encrypt(request_with_key)?;

    let resp = api_client.sends_api().put(&id, Some(send_request)).await?;

    let send: Send = resp.try_into()?;

    // Verify the server returned the correct send ID
    if send.id != Some(send_id) {
        return Err(EditSendError::IdMismatch {
            expected: send_id.into(),
            returned: send.id.map(Into::into),
        });
    }

    repository.set(send_id, send.clone()).await?;

    Ok(key_store.decrypt(&send)?)
}

#[cfg_attr(feature = "wasm", wasm_bindgen)]
impl SendClient {
    /// Edit the [Send] and save it to the server.
    pub async fn edit(
        &self,
        send_id: SendId,
        request: SendEditRequest,
    ) -> Result<SendView, EditSendError> {
        let key_store = self.client.internal.get_key_store();
        let config = self.client.internal.get_api_configurations();
        let repository = self.get_repository()?;

        edit_send(
            key_store,
            &config.api_client,
            repository.as_ref(),
            send_id,
            request,
        )
        .await
    }
}

#[cfg(test)]
mod tests {
    use bitwarden_api_api::{apis::ApiClient, models::SendResponseModel};
    use bitwarden_core::key_management::SymmetricKeySlotId;
    use bitwarden_crypto::SymmetricKeyAlgorithm;
    use bitwarden_test::MemoryRepository;
    use chrono::{DateTime, Utc};
    use uuid::uuid;

    use super::*;
    use crate::{AuthType, SendTextView, SendType, SendViewType};

    // Pins the wire shape of `AuthEdit`. Both `AuthEdit` and `SendAuthType` are
    // internally tagged with `#[serde(tag = "type")]`; the `Set { auth: ... }` struct
    // variant keeps those tags in separate scopes. A tuple variant `Set(SendAuthType)`
    // would flatten the inner tag into the outer object and produce a duplicate `"type"`
    // key — this test catches that if anyone refactors back.
    #[test]
    fn auth_edit_round_trips_through_json_without_duplicate_type_keys() {
        let cases = [
            (AuthEdit::Preserve, serde_json::json!({"type": "preserve"})),
            (
                AuthEdit::Set {
                    auth: SendAuthType::None,
                },
                serde_json::json!({"type": "set", "auth": {"type": "none"}}),
            ),
            (
                AuthEdit::Set {
                    auth: SendAuthType::Password {
                        password: "hunter2".to_string(),
                    },
                },
                serde_json::json!({
                    "type": "set",
                    "auth": {"type": "password", "password": "hunter2"}
                }),
            ),
            (
                AuthEdit::Set {
                    auth: SendAuthType::Emails {
                        emails: vec!["[email protected]".to_string(), "[email protected]".to_string()],
                    },
                },
                serde_json::json!({
                    "type": "set",
                    "auth": {"type": "emails", "emails": ["[email protected]", "[email protected]"]}
                }),
            ),
        ];
        for (value, expected_json) in cases {
            let serialized = serde_json::to_value(&value).expect("serialize");
            assert_eq!(
                serialized, expected_json,
                "wire shape mismatch for {value:?}"
            );
            let deserialized: AuthEdit = serde_json::from_value(serialized).expect("round-trip");
            assert_eq!(deserialized, value, "round-trip mismatch for {value:?}");
        }
    }

    #[tokio::test]
    async fn test_edit_send() {
        let store: KeyStore<KeySlotIds> = KeyStore::default();
        {
            let mut ctx = store.context_mut();
            let local_key_id = ctx.make_symmetric_key(SymmetricKeyAlgorithm::Aes256CbcHmac);
            ctx.persist_symmetric_key(local_key_id, SymmetricKeySlotId::User)
                .unwrap();
        }

        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");

        // Pre-populate the repository with an existing send by encrypting a SendView
        let repository = MemoryRepository::<Send>::default();
        let existing_send_view = SendView {
            id: None, // No ID initially to allow key generation
            access_id: None,
            name: "original".to_string(),
            notes: Some("original notes".to_string()),
            key: None, // Generates a new key when first encrypted
            new_password: None,
            has_password: false,
            r#type: SendType::Text,
            file: None,
            text: Some(SendTextView {
                text: Some("original text".to_string()),
                hidden: false,
            }),
            data: None,
            max_access_count: None,
            access_count: 0,
            disabled: false,
            hide_email: false,
            revision_date: "2025-01-01T00:00:00Z".parse().unwrap(),
            deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
            expiration_date: None,
            emails: Vec::new(),
            auth_type: AuthType::None,
        };
        let mut existing_send = store.encrypt(existing_send_view).unwrap();
        existing_send.id = Some(crate::send::SendId::new(send_id)); // Set the ID after encryption
        repository
            .set(SendId::new(send_id), existing_send)
            .await
            .unwrap();

        let api_client = ApiClient::new_mocked(move |mock| {
            mock.sends_api
                .expect_put()
                .returning(move |_id, model| {
                    let model = model.unwrap();
                    Ok(SendResponseModel {
                        id: Some(send_id),
                        name: model.name,
                        revision_date: Some("2025-01-02T00:00:00Z".to_string()),
                        object: Some("send".to_string()),
                        access_id: None,
                        r#type: model.r#type,
                        auth_type: model.auth_type,
                        notes: model.notes,
                        file: model.file,
                        text: model.text,
                        data: model.data,
                        key: Some(model.key),
                        max_access_count: model.max_access_count,
                        access_count: Some(0),
                        password: model.password,
                        emails: model.emails,
                        disabled: Some(model.disabled),
                        expiration_date: model.expiration_date,
                        deletion_date: Some(model.deletion_date),
                        hide_email: model.hide_email,
                    })
                })
                .once();
        });

        let result = edit_send(
            &store,
            &api_client,
            &repository,
            SendId::new(send_id),
            SendEditRequest {
                name: "updated".to_string(),
                notes: Some("updated notes".to_string()),
                view_type: SendViewType::Text(SendTextView {
                    text: Some("updated text".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Set {
                    auth: SendAuthType::None,
                },
            },
        )
        .await
        .unwrap();

        // Verify the result
        assert_eq!(result.id, Some(crate::send::SendId::new(send_id)));
        assert_eq!(result.name, "updated");
        assert_eq!(result.notes, Some("updated notes".to_string()));
        assert!(result.key.is_some(), "Expected a key");
        assert_eq!(
            result.revision_date,
            "2025-01-02T00:00:00Z".parse::<DateTime<Utc>>().unwrap()
        );

        // Confirm the send was updated in the repository
        let stored = repository.get(SendId::new(send_id)).await.unwrap().unwrap();
        assert_eq!(
            store
                .decrypt::<SymmetricKeySlotId, Send, SendView>(&stored)
                .unwrap()
                .name,
            "updated"
        );
    }

    #[tokio::test]
    async fn test_edit_send_not_found() {
        let store: KeyStore<KeySlotIds> = KeyStore::default();
        {
            let mut ctx = store.context_mut();
            let local_key_id = ctx.make_symmetric_key(SymmetricKeyAlgorithm::Aes256CbcHmac);
            ctx.persist_symmetric_key(local_key_id, SymmetricKeySlotId::User)
                .unwrap();
        }

        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");
        let repository = MemoryRepository::<Send>::default();
        let api_client = ApiClient::new_mocked(move |_mock| {});

        let result = edit_send(
            &store,
            &api_client,
            &repository,
            SendId::new(send_id),
            SendEditRequest {
                name: "test".to_string(),
                notes: None,
                view_type: SendViewType::Text(SendTextView {
                    text: Some("test".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Set {
                    auth: SendAuthType::None,
                },
            },
        )
        .await;

        assert!(result.is_err());
        assert!(matches!(
            result.unwrap_err(),
            EditSendError::ItemNotFound(_)
        ));
    }

    #[tokio::test]
    async fn test_edit_send_http_error() {
        let store: KeyStore<KeySlotIds> = KeyStore::default();
        {
            let mut ctx = store.context_mut();
            let local_key_id = ctx.make_symmetric_key(SymmetricKeyAlgorithm::Aes256CbcHmac);
            ctx.persist_symmetric_key(local_key_id, SymmetricKeySlotId::User)
                .unwrap();
        }

        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");

        // Pre-populate the repository with an existing send by encrypting a SendView
        let repository = MemoryRepository::<Send>::default();
        let existing_send_view = SendView {
            id: None, // No ID initially to allow key generation
            access_id: None,
            name: "original".to_string(),
            notes: Some("original notes".to_string()),
            key: None, // Generates a new key when first encrypted
            new_password: None,
            has_password: false,
            r#type: SendType::Text,
            file: None,
            text: Some(SendTextView {
                text: Some("original text".to_string()),
                hidden: false,
            }),
            data: None,
            max_access_count: None,
            access_count: 0,
            disabled: false,
            hide_email: false,
            revision_date: "2025-01-01T00:00:00Z".parse().unwrap(),
            deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
            expiration_date: None,
            emails: Vec::new(),
            auth_type: AuthType::None,
        };
        let mut existing_send = store.encrypt(existing_send_view).unwrap();
        existing_send.id = Some(crate::send::SendId::new(send_id)); // Set the ID after encryption
        repository
            .set(SendId::new(send_id), existing_send)
            .await
            .unwrap();

        let api_client = ApiClient::new_mocked(move |mock| {
            mock.sends_api
                .expect_put()
                .returning(move |_id, _model| Err(std::io::Error::other("Simulated error").into()));
        });

        let result = edit_send(
            &store,
            &api_client,
            &repository,
            SendId::new(send_id),
            SendEditRequest {
                name: "test".to_string(),
                notes: None,
                view_type: SendViewType::Text(SendTextView {
                    text: Some("test".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Set {
                    auth: SendAuthType::None,
                },
            },
        )
        .await;

        assert!(result.is_err());
        assert!(matches!(result.unwrap_err(), EditSendError::Api(_)));
    }

    // Builds a fixture with the given `password_hash`, `emails`, and `auth_type` patched
    // onto the encrypted `Send` row. Goes around `encrypt(SendView)` because `SendView`
    // doesn't expose the wire-format password/emails fields that preserve-mode tests need
    // to assert against.
    async fn make_fixture_with_existing_auth(
        send_id: uuid::Uuid,
        password_hash: Option<String>,
        emails: Option<String>,
        auth_type: AuthType,
    ) -> (KeyStore<KeySlotIds>, MemoryRepository<Send>) {
        let store: KeyStore<KeySlotIds> = KeyStore::default();
        {
            let mut ctx = store.context_mut();
            let local_key_id = ctx.make_symmetric_key(SymmetricKeyAlgorithm::Aes256CbcHmac);
            ctx.persist_symmetric_key(local_key_id, SymmetricKeySlotId::User)
                .unwrap();
        }

        // Encrypt a baseline view to get realistic name/text/key ciphertext, then patch the
        // wire-format auth fields onto the encrypted row.
        let baseline = SendView {
            id: None,
            access_id: None,
            name: "original".to_string(),
            notes: None,
            key: None,
            new_password: None,
            has_password: false,
            r#type: SendType::Text,
            file: None,
            text: Some(SendTextView {
                text: Some("secret".to_string()),
                hidden: false,
            }),
            data: None,
            max_access_count: None,
            access_count: 0,
            disabled: false,
            hide_email: false,
            revision_date: "2025-01-01T00:00:00Z".parse().unwrap(),
            deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
            expiration_date: None,
            emails: Vec::new(),
            auth_type: AuthType::None,
        };
        let mut existing_send = store.encrypt(baseline).unwrap();
        existing_send.id = Some(crate::send::SendId::new(send_id));
        existing_send.password = password_hash;
        existing_send.emails = emails;
        existing_send.auth_type = auth_type;

        let repository = MemoryRepository::<Send>::default();
        repository
            .set(SendId::new(send_id), existing_send)
            .await
            .unwrap();

        (store, repository)
    }

    // Drives `edit_send` and captures the `SendRequestModel` sent to the server.
    async fn capture_edit_put_model(
        store: &KeyStore<KeySlotIds>,
        repository: &MemoryRepository<Send>,
        send_id: uuid::Uuid,
        request: SendEditRequest,
    ) -> bitwarden_api_api::models::SendRequestModel {
        let captured: std::sync::Arc<
            std::sync::Mutex<Option<bitwarden_api_api::models::SendRequestModel>>,
        > = std::sync::Arc::new(std::sync::Mutex::new(None));
        let sink = captured.clone();

        let api_client = ApiClient::new_mocked(move |mock| {
            let sink = sink.clone();
            mock.sends_api
                .expect_put()
                .returning(move |_id, model| {
                    let model = model.unwrap();
                    *sink.lock().unwrap() = Some(model.clone());
                    Ok(SendResponseModel {
                        id: Some(send_id),
                        name: model.name.clone(),
                        revision_date: Some("2025-01-02T00:00:00Z".to_string()),
                        object: Some("send".to_string()),
                        access_id: None,
                        r#type: model.r#type,
                        auth_type: model.auth_type,
                        notes: model.notes.clone(),
                        file: model.file.clone(),
                        text: model.text.clone(),
                        data: model.data.clone(),
                        key: Some(model.key.clone()),
                        max_access_count: model.max_access_count,
                        access_count: Some(0),
                        password: model.password.clone(),
                        emails: model.emails.clone(),
                        disabled: Some(model.disabled),
                        expiration_date: model.expiration_date.clone(),
                        deletion_date: Some(model.deletion_date.clone()),
                        hide_email: model.hide_email,
                    })
                })
                .once();
        });

        edit_send(
            store,
            &api_client,
            repository,
            SendId::new(send_id),
            request,
        )
        .await
        .unwrap();

        captured.lock().unwrap().take().expect("PUT was not called")
    }

    // Regression test for the auth-strip bug: `AuthEdit::Preserve` must forward only
    // the existing `authType` so the server retains the stored password hash.
    #[tokio::test]
    async fn test_edit_preserves_existing_password_when_auth_is_none() {
        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");
        let existing_hash = "abc123hashstub==".to_string();
        let (store, repository) =
            make_fixture_with_existing_auth(send_id, Some(existing_hash), None, AuthType::Password)
                .await;

        let model = capture_edit_put_model(
            &store,
            &repository,
            send_id,
            SendEditRequest {
                name: "updated".to_string(),
                notes: None,
                view_type: SendViewType::Text(SendTextView {
                    text: Some("secret".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Preserve,
            },
        )
        .await;

        assert_eq!(
            model.password, None,
            "preserve mode must omit the password hash so the server retains the stored value",
        );
        assert_eq!(model.emails, None);
        assert_eq!(
            model.auth_type,
            Some(bitwarden_api_api::models::AuthType::Password),
            "preserve mode must forward the existing authType so the server doesn't clear auth",
        );
    }

    #[tokio::test]
    async fn test_edit_preserves_existing_emails_when_auth_is_none() {
        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");
        let existing_emails = "[email protected],[email protected]".to_string();
        let (store, repository) =
            make_fixture_with_existing_auth(send_id, None, Some(existing_emails), AuthType::Email)
                .await;

        let model = capture_edit_put_model(
            &store,
            &repository,
            send_id,
            SendEditRequest {
                name: "updated".to_string(),
                notes: None,
                view_type: SendViewType::Text(SendTextView {
                    text: Some("secret".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Preserve,
            },
        )
        .await;

        assert_eq!(model.password, None);
        assert_eq!(
            model.emails, None,
            "preserve mode must omit the email list so the server retains the stored value",
        );
        assert_eq!(
            model.auth_type,
            Some(bitwarden_api_api::models::AuthType::Email),
            "preserve mode must forward the existing authType so the server doesn't clear auth",
        );
    }

    #[tokio::test]
    async fn test_edit_preserves_no_auth_when_auth_is_none() {
        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");
        let (store, repository) =
            make_fixture_with_existing_auth(send_id, None, None, AuthType::None).await;

        let model = capture_edit_put_model(
            &store,
            &repository,
            send_id,
            SendEditRequest {
                name: "updated".to_string(),
                notes: None,
                view_type: SendViewType::Text(SendTextView {
                    text: Some("secret".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Preserve,
            },
        )
        .await;

        assert_eq!(model.password, None);
        assert_eq!(model.emails, None);
        assert_eq!(
            model.auth_type,
            Some(bitwarden_api_api::models::AuthType::None),
        );
    }

    // `AuthEdit::Set { auth: SendAuthType::None }` is the escape hatch for deliberately
    // stripping auth — distinct from `Preserve`, which leaves existing auth in place.
    #[tokio::test]
    async fn test_edit_explicit_auth_none_overrides_existing_password() {
        let send_id = uuid!("25afb11c-9c95-4db5-8bac-c21cb204a3f1");
        let (store, repository) = make_fixture_with_existing_auth(
            send_id,
            Some("existing-hash".to_string()),
            None,
            AuthType::Password,
        )
        .await;

        let model = capture_edit_put_model(
            &store,
            &repository,
            send_id,
            SendEditRequest {
                name: "updated".to_string(),
                notes: None,
                view_type: SendViewType::Text(SendTextView {
                    text: Some("secret".to_string()),
                    hidden: false,
                }),
                max_access_count: None,
                disabled: false,
                hide_email: false,
                deletion_date: "2025-01-10T00:00:00Z".parse().unwrap(),
                expiration_date: None,
                auth: AuthEdit::Set {
                    auth: SendAuthType::None,
                },
            },
        )
        .await;

        assert_eq!(model.password, None);
        assert_eq!(model.emails, None);
        assert_eq!(
            model.auth_type,
            Some(bitwarden_api_api::models::AuthType::None),
        );
    }
}