54 lines
2.1 KiB
Rust
54 lines
2.1 KiB
Rust
use opaque_ke::rand::rngs::OsRng;
|
|
use nkode_protocol::opaque::client::{AuthenticationData, ClientAuthError, OpaqueAuthLogin, OpaqueAuthRegister};
|
|
use nkode_protocol::models::opaque::NKodeServerSetup;
|
|
use nkode_protocol::repository::opaque::in_memory::in_memory_transport::{InMemoryCodeServer, InMemoryKeyServer};
|
|
|
|
#[tokio::test]
|
|
async fn opaque_key_registration_and_login_roundtrip() {
|
|
let mut rng = OsRng;
|
|
let server_setup = NKodeServerSetup::new(&mut rng);
|
|
let server = InMemoryKeyServer::new(server_setup);
|
|
let auth_reg = OpaqueAuthRegister::new(server.clone());
|
|
let auth_data = AuthenticationData::from_secret_key("a@b.com", b"supersecret16bytes");
|
|
auth_reg.register(&auth_data).await.expect("registration should succeed");
|
|
let login_reg = OpaqueAuthLogin::new(server);
|
|
let session_key =login_reg.login(&auth_data)
|
|
.await
|
|
.expect("login should succeed");
|
|
assert!(!session_key.is_empty());
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn opaque_login_fails_if_not_registered() {
|
|
let mut rng = OsRng;
|
|
let server_setup = NKodeServerSetup::new(&mut rng);
|
|
let server = InMemoryKeyServer::new(server_setup);
|
|
let auth = AuthenticationData::from_secret_key("nope@nope.com", b"supersecret16bytes");
|
|
let login_reg = OpaqueAuthLogin::new(server);
|
|
let err = login_reg.login(&auth)
|
|
.await
|
|
.expect_err("login should fail if user not registered");
|
|
match err {
|
|
ClientAuthError::Transport(_) => {}
|
|
other => panic!("unexpected error: {other:?}"),
|
|
}
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn cannot_register_code_before_key() {
|
|
let mut rng = OsRng;
|
|
let server_setup = NKodeServerSetup::new(&mut rng);
|
|
let mut server = InMemoryCodeServer::new(server_setup);
|
|
let auth_reg = OpaqueAuthRegister::new(server.clone());
|
|
let auth = AuthenticationData::from_code("x@y.com", &[1usize,2,3,4]);
|
|
let err = auth_reg.register(&auth)
|
|
.await
|
|
.expect_err("should fail because key is not registered");
|
|
match err {
|
|
ClientAuthError::Transport(msg) => {
|
|
assert!(msg.contains("KeyNotRegistered"), "msg was: {msg}");
|
|
}
|
|
other => panic!("unexpected error: {other:?}"),
|
|
}
|
|
}
|