fmt

Author: cfluke-cb

src/main/java/com/coinbase/examples/apikey/RotateApiKey.java

@@ -49,7 +49,8 @@ public static void main(String[] args) {
           Utils.getObjectMapper().writerWithDefaultPrettyPrinter().writeValueAsString(response));
 
       String signingKey =
-          Utils.getObjectMapper().readTree(System.getenv("COINBASE_PRIME_CREDENTIALS"))
+          Utils.getObjectMapper()
+              .readTree(System.getenv("COINBASE_PRIME_CREDENTIALS"))
               .get("signingKey")
               .asText();
       RotatedApiKeyCredentials rotated = ApiKeyRotation.decrypt(signingKey, response);

src/main/java/com/coinbase/prime/apikey/ApiKeyRotation.java

@@ -33,8 +33,8 @@
  * Decrypts {@code encrypted_credentials} from {@link RotateApiKeyResponse} using only the JDK:
  * HKDF-SHA256 (RFC 5869) and AES-256-GCM.
  *
- * <p>Wire format after Base64 decode: {@code version(1) | salt(32) | nonce(12) |
- * ciphertext+tag}. Version must be {@code 0x01}. HKDF info is {@code api-key-rotation}. See <a
+ * <p>Wire format after Base64 decode: {@code version(1) | salt(32) | nonce(12) | ciphertext+tag}.
+ * Version must be {@code 0x01}. HKDF info is {@code api-key-rotation}. See <a
  * href="https://docs.cdp.coinbase.com/prime/rest-api/api-key-rotation">API Key Rotation</a>.
  */
 public final class ApiKeyRotation {
@@ -116,9 +116,7 @@ public static RotatedApiKeyCredentials decrypt(String secretKey, String encrypte
     }
   }
 
-  /**
-   * HKDF-SHA256 (RFC 5869) extract-then-expand. Package-visible for RFC test vectors.
-   */
+  /** HKDF-SHA256 (RFC 5869) extract-then-expand. Package-visible for RFC test vectors. */
   static byte[] hkdfSha256(byte[] ikm, byte[] salt, byte[] info, int length)
       throws GeneralSecurityException {
     if (length <= 0 || length > 255 * HASH_LEN) {

src/test/java/com/coinbase/prime/apikey/ApiKeyRotationTest.java

@@ -36,8 +36,7 @@ public void hkdfSha256MatchesRfc5869TestCase1() throws Exception {
     byte[] ikm = hex("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b");
     byte[] salt = hex("000102030405060708090a0b0c");
     byte[] info = hex("f0f1f2f3f4f5f6f7f8f9");
-    byte[] okm =
-        ApiKeyRotation.hkdfSha256(ikm, salt, info, 42);
+    byte[] okm = ApiKeyRotation.hkdfSha256(ikm, salt, info, 42);
     assertArrayEquals(
         hex("3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865"),
         okm);
@@ -73,8 +72,7 @@ public void decryptRoundTrip() throws Exception {
   @Test
   public void decryptAcceptsMissingBase64Padding() throws Exception {
     String secretKey = "current-signing-key";
-    String plaintext =
-        "{\"access_key\":\"a\",\"secret_key\":\"s\",\"passphrase\":\"p\"}";
+    String plaintext = "{\"access_key\":\"a\",\"secret_key\":\"s\",\"passphrase\":\"p\"}";
     String encrypted = encrypt(secretKey, plaintext);
     while (encrypted.endsWith("=")) {
       encrypted = encrypted.substring(0, encrypted.length() - 1);
@@ -101,8 +99,7 @@ public void decryptRejectsWrongVersion() {
   public void decryptRejectsWrongSecret() throws Exception {
     String encrypted =
         encrypt(
-            "correct-secret",
-            "{\"access_key\":\"a\",\"secret_key\":\"s\",\"passphrase\":\"p\"}");
+            "correct-secret", "{\"access_key\":\"a\",\"secret_key\":\"s\",\"passphrase\":\"p\"}");
     assertThrows(
         CoinbaseClientException.class, () -> ApiKeyRotation.decrypt("wrong-secret", encrypted));
   }