summaryrefslogtreecommitdiff
path: root/spec/django/login.js
blob: d13f6957ebfc40f03f5c193f2260ada2069b901d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
describe("Login", function() {

  it("has an identify function", function() {
    var srp = new SRP();
    expect(typeof srp.identify).toBe('function');
  });

  describe("(INTEGRATION)", function (){
    // a valid auth attempt for the user / password given in the spec runner:
    var a = 'af141ae6';
    var B = '887005895b1f5528b4e4dfdce914f73e763b96d3c901d2f41d8b8cd26255a75';
    var salt = '5d3055e0acd3ddcfc15';
    var M = 'be6d7db2186d5f6a2c55788479b6eaf75229a7ca0d9e7dc1f886f1970a0e8065'
    var M2 = '2547cf26318519090f506ab73a68995a2626b1c948e6f603ef9e1b0b78bf0f7b';
    var A, callback;


    beforeEach(function() {
      var srp = new SRP();
      var session = new srp.Session();
      this.srp = new SRP(null, session)
      A = session.calculateAndSetA(a);

      specHelper.setupFakeXHR.apply(this);

      this.srp.success = sinon.spy();
    });

    afterEach(function() {
      this.xhr.restore();
    });

    it("works with XML responses", function(){
      this.srp.identify();
      
      this.expectRequest('handshake/', 'I=user&A='+A);
      this.respondXML("<r s='"+salt+"' B='"+B+"' />");
      this.expectRequest('authenticate/', 'M='+M);
      this.respondXML("<M>"+M2+"</M>");
      
      expect(this.srp.success).toHaveBeenCalled();
    });

    it("works with JSON responses", function(){
      this.srp.identify();

      this.expectRequest('handshake/', 'I=user&A='+A);
      this.respondJSON({s: salt, B: B});
      this.expectRequest('authenticate/', 'M='+M);
      this.respondJSON({M: M2});

      expect(this.srp.success).toHaveBeenCalled();
    });
    
    it("rejects B = 0", function(){
      this.srp.error = sinon.spy();
      this.srp.identify();

      this.expectRequest('handshake/', 'I=user&A='+A);
      this.respondJSON({s: salt, B: 0});
      // aborting if B=0
      expect(this.requests).toEqual([]);
      expect(this.srp.error).toHaveBeenCalled();
    });
  });


});