deepcrayon/lila
deepcrayon/lila
1
0
Fork 0
Code Releases Activity

Fix AuthTest

Browse source
This commit is contained in:
Isaac Levy 2017-10-24 16:30:21 -04:00
parent 5a7588e770
commit 5dab7ef3bf
1 changed files with 9 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
modules/user/src/test/AuthTest.scala
View file

@ -17,30 +17,12 @@ class AuthTest extends Specification {
val auth = getAuth(new PasswordHasher(secret, 2))
// Extracted from mongo
val shaUser = AuthData(
"",
password = Some("1c4b2f9a0605c1af73d0ac66ab67c89a6bc76efa"),
salt = Some("7IzdmPSe0iZnGc1ChY32fVsfrZBLdIlN")
)
"sha matches" in {
// Mongo after password change
val shaUserWithKey = shaUser.copy(sha512 = Some(false))
"correct1" >> auth.compare(shaUser, P("password"))
"correct2" >> auth.compare(shaUserWithKey, P("password"))
"wrong1" >> !auth.compare(shaUser, P(""))
"wrong2" >> !auth.compare(shaUser, P(""))
"wrong sha" >> !auth.compare(shaUser.copy(sha512 = Some(true)), P("password"))
}
"bcrypt checks" in {
val bCryptUser = AuthData(
"",
bpass = HashedPassword(Base64.getDecoder.decode(
"+p7ysDb8OU9yMQ/LuFxFNgJ0HBKH7iJy8tkowG65NWjPC3Y6CzYV"
)).some
))
)
"correct" >> auth.compare(bCryptUser, P("password"))
"wrong pass" >> !auth.compare(bCryptUser, P(""))
@ -54,13 +36,13 @@ class AuthTest extends Specification {
"very long password" in {
val a100 = P("a" * 100)
val user = AuthData("", bpass = auth.passEnc(a100).some)
val user = AuthData("", bpass = auth.passEnc(a100))
"correct" >> auth.compare(user, a100)
"wrong fails" >> !auth.compare(user, P("a" * 99))
}
"handle crazy passwords" in {
val abcUser = AuthData("", bpass = auth.passEnc(P("abc")).some)
val abcUser = AuthData("", bpass = auth.passEnc(P("abc")))
"test eq" >> auth.compare(abcUser, P("abc"))
"vs null bytes" >> !auth.compare(abcUser, P("abc\u0000"))
@ -70,17 +52,15 @@ class AuthTest extends Specification {
}
"migrated user" in {
val shaToBcrypt = shaUser.copy(
// generated purely from stored data
bpass = shaUser.password map { p => auth.passEnc(P(p)) },
password = None
val shaToBcrypt = AuthData(
"",
salt = Some("7IzdmPSe0iZnGc1ChY32fVsfrZBLdIlN"),
// Sha hash extracted from mongo
bpass = auth.passEnc(P("1c4b2f9a0605c1af73d0ac66ab67c89a6bc76efa"))
)
val shaToBcryptNoPass = shaToBcrypt.copy(password = None)
"correct" >> auth.compare(shaToBcrypt, P("password"))
"wrong pass" >> !auth.compare(shaToBcrypt, P(""))
"no pass" >> auth.compare(shaToBcryptNoPass, P("password"))
"wrong sha" >> !auth.compare(shaToBcryptNoPass.copy(sha512 = Some(true)), P("password"))
"wrong sha" >> !auth.compare(shaToBcrypt.copy(sha512 = Some(true)), P("password"))
}
}