1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
require 'test_helper'
class AccountFlowTest < ActionDispatch::IntegrationTest
# this test wraps the api and implements the interface the ruby-srp client.
def handshake(login, aa)
post "sessions", :login => login, 'A' => aa.to_s(16)
assert_response :success
response = JSON.parse(@response.body)
if response['errors']
raise RECORD_NOT_FOUND.new(response['errors'])
else
return response['B'].hex
end
end
def validate(m)
put "sessions/" + @login, :client_auth => m.to_s(16)
assert_response :success
return JSON.parse(@response.body)
end
def setup
@login = "integration_test_user"
User.find_by_login(@login).tap{|u| u.destroy if u}
@password = "srp, verify me!"
@srp = SRP::Client.new(@login, @password)
@user_params = {
:login => @login,
:password_verifier => @srp.verifier.to_s(16),
:password_salt => @srp.salt.to_s(16)
}
post '/users.json', :user => @user_params
@user = User.find_by_param(@login)
end
def teardown
@user.destroy if @user # make sure we can run this test again
end
test "signup response" do
assert_json_response @user_params.slice(:login, :password_salt)
assert_response :success
end
test "signup and login with srp via api" do
server_auth = @srp.authenticate(self)
assert_nil server_auth["errors"]
assert server_auth["M2"]
end
test "signup and wrong password login attempt" do
srp = SRP::Client.new(@login, "wrong password")
server_auth = srp.authenticate(self)
assert_equal ["wrong password"], server_auth["errors"]['password']
assert_nil server_auth["M2"]
end
test "signup and wrong username login attempt" do
srp = SRP::Client.new("wrong_login", @password)
server_auth = nil
assert_raises RECORD_NOT_FOUND do
server_auth = srp.authenticate(self)
end
assert_nil server_auth
end
end
|
