a
/
gosora
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

test mfa auth against it's own generated token

This commit is contained in:
Azareal 2020-04-03 08:57:46 +10:00
parent 8b059ac877
commit d920fe0a86
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
misc_test.go
View File

@ -14,6 +14,7 @@ import (
c "github.com/Azareal/Gosora/common" c "github.com/Azareal/Gosora/common"
"github.com/Azareal/Gosora/common/phrases" "github.com/Azareal/Gosora/common/phrases"
"github.com/Azareal/Gosora/common/gauth"
) )
func miscinit(t *testing.T) { func miscinit(t *testing.T) {
@ -1811,7 +1812,8 @@ func TestMFAStore(t *testing.T) {
_, err = c.MFAstore.Get(1) _, err = c.MFAstore.Get(1)
recordMustNotExist(t, err, "mfa uid 1 should not exist") recordMustNotExist(t, err, "mfa uid 1 should not exist")
secret := "test" secret, err := c.GenerateGAuthSecret()
expectNilErr(t,err)
expectNilErr(t, c.MFAstore.Create(secret, 1)) expectNilErr(t, c.MFAstore.Create(secret, 1))
_, err = c.MFAstore.Get(0) _, err = c.MFAstore.Get(0)
recordMustNotExist(t, err, "mfa uid 0 should not exist") recordMustNotExist(t, err, "mfa uid 0 should not exist")
@ -1841,6 +1843,9 @@ func TestMFAStore(t *testing.T) {
it, err = c.MFAstore.Get(1) it, err = c.MFAstore.Get(1)
test(i) test(i)
} }
token, err := gauth.GetTOTPToken(secret)
expectNilErr(t,err)
expectNilErr(t, c.Auth.ValidateMFAToken(token, 1))
expectNilErr(t, it.Delete()) expectNilErr(t, it.Delete())
_, err = c.MFAstore.Get(-1) _, err = c.MFAstore.Get(-1)
recordMustNotExist(t, err, "mfa uid -1 should not exist") recordMustNotExist(t, err, "mfa uid -1 should not exist")
@ -2001,6 +2006,7 @@ func TestAuth(t *testing.T) {
// TODO: Create a user with a unicode password and see if we can login as them // TODO: Create a user with a unicode password and see if we can login as them
// TODO: Tests for SessionCheck, GetCookies, and ForceLogout // TODO: Tests for SessionCheck, GetCookies, and ForceLogout
// TODO: Tests for MFA Verification
} }
// TODO: Vary the salts? Keep in mind that some algorithms store the salt in the hash therefore the salt string may be blank // TODO: Vary the salts? Keep in mind that some algorithms store the salt in the hash therefore the salt string may be blank