summaryrefslogtreecommitdiff
path: root/spec/django/login.js
diff options
context:
space:
mode:
Diffstat (limited to 'spec/django/login.js')
-rw-r--r--spec/django/login.js67
1 files changed, 67 insertions, 0 deletions
diff --git a/spec/django/login.js b/spec/django/login.js
new file mode 100644
index 0000000..eea6062
--- /dev/null
+++ b/spec/django/login.js
@@ -0,0 +1,67 @@
+describe("Login", function() {
+
+ it("has an identify function", function() {
+ var srp = new SRP();
+ expect(typeof srp.identify).toBe('function');
+ });
+
+ describe("(INTEGRATION)", function (){
+ // a valid auth attempt for the user / password given in the spec runner:
+ var a = 'af141ae6';
+ var B = '887005895b1f5528b4e4dfdce914f73e763b96d3c901d2f41d8b8cd26255a75';
+ var salt = '5d3055e0acd3ddcfc15';
+ var M = 'be6d7db2186d5f6a2c55788479b6eaf75229a7ca0d9e7dc1f886f1970a0e8065'
+ var M2 = '2547cf26318519090f506ab73a68995a2626b1c948e6f603ef9e1b0b78bf0f7b';
+ var A, callback;
+
+
+ beforeEach(function() {
+ this.srp = new SRP();
+ A = this.srp.calculateAndSetA(a);
+
+ specHelper.setupFakeXHR.apply(this);
+
+ this.srp.success = sinon.spy();
+ });
+
+ afterEach(function() {
+ this.xhr.restore();
+ });
+
+ it("works with XML responses", function(){
+ this.srp.identify();
+
+ this.expectRequest('handshake/', 'I=user&A='+A);
+ this.respondXML("<r s='"+salt+"' B='"+B+"' />");
+ this.expectRequest('authenticate/', 'M='+M);
+ this.respondXML("<M>"+M2+"</M>");
+
+ expect(this.srp.success).toHaveBeenCalled();
+ });
+
+ it("works with JSON responses", function(){
+ this.srp.identify();
+
+ this.expectRequest('handshake/', 'I=user&A='+A);
+ this.respondJSON({s: salt, B: B});
+ this.expectRequest('authenticate/', 'M='+M);
+ this.respondJSON({M: M2});
+
+ expect(this.srp.success).toHaveBeenCalled();
+ });
+
+ it("rejects B = 0", function(){
+ this.srp.error_message = sinon.spy();
+ this.srp.identify();
+
+ this.expectRequest('handshake/', 'I=user&A='+A);
+ this.respondJSON({s: salt, B: 0});
+ // aborting if B=0
+ expect(this.requests).toEqual([]);
+ expect(this.srp.error_message).toHaveBeenCalled();
+ });
+ });
+
+
+});
+