1 files changed, 57 insertions, 0 deletions
diff --git a/modules/auth-config.el b/modules/auth-config.el
new file mode 100644
index 00000000..43849f20
--- /dev/null
+++ b/modules/auth-config.el
@@ -0,0 +1,57 @@
+;; auth-config.el --- Configuration for Authentication Utilities -*- lexical-binding: t; -*-
+;; author Craig Jennings <c@cjennings.net>
+
+;;; Commentary:
+;;
+;; Configuration for Emacs authentication and GPG integration:
+
+;; • auth-source
+;;   – Forces use of your default authinfo file
+;;   – Disable external GPG agent in favor of Emacs’s own prompt
+;;   – Enable auth-source debug messages
+
+;; • Easy PG Assistant (epa)
+;;   – Force using the ‘gpg2’ executable for encryption/decryption operations
+
+;;; Code:
+
+(require 'user-constants) ;; defines authinfo-file location
+
+;; -------------------------------- Auth Sources -------------------------------
+;; auth sources settings
+
+(use-package auth-source
+  :ensure nil                   ;; built in
+  :demand t                     ;; load this package immediately
+  :config
+  (setq auth-sources `(,authinfo-file))
+  (setenv "GPG_AGENT_INFO" nil) ;; emacs use internal prompt, not gpg agent
+  (setq auth-source-debug t))   ;; echo debug info to Messages
+
+;; ----------------------------- Easy PG Assistant -----------------------------
+;; Key management, cryptographic operations on regions and files, dired
+;; integration, and automatic encryption/decryption of *.gpg files.
+
+(use-package epa
+  :ensure nil                    ;; built-in
+  :defer .5
+  :config
+  (setq epg-gpg-program "gpg2")) ;; force use gpg2 (not gpg v.1)
+
+(provide 'auth-config)
+;;; auth-config.el ends here.
+
+;; --------------------------------- ERT Tests ---------------------------------
+;; Run these tests with M-x ert RET t RET
+
+(require 'ert)
+(require 'cl-lib)
+
+(ert-deftest auth-config/authinfo-file-exists ()
+  "Verify that `authinfo-file` actually exists on disk."
+  (should (and (stringp authinfo-file)
+			   (file-exists-p authinfo-file))))
+
+(ert-deftest auth-config/gpg2-is-on-path ()
+  "Verify that the `gpg2` executable is on the user’s PATH."
+  (should (executable-find "gpg2")))