blob: 826b6314a72b2fe4166280d409d1f27a411c128c (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
{-# LANGUAGE OverloadedStrings #-}
{-|
Copyright : (c) 2015 Julien Tanguy
License : BSD3
Maintainer : julien.tanguy@jhome.fr
This test suite is based on the pymacaroons test suite:
<https://github.com/ecordell/pymacaroons>
-}
module Crypto.Macaroon.Verifier.Internal.Tests where
import Data.Bool
import qualified Data.ByteString as BS
import qualified Data.ByteString.Char8 as B8
import Data.Either
import Data.Either.Validation
import Data.List
import Test.Tasty
import Test.Tasty.HUnit
import Test.Tasty.QuickCheck hiding (Failure, Success)
import Crypto.Macaroon
import Crypto.Macaroon.Verifier.Internal
import Crypto.Macaroon.Instances
tests :: TestTree
tests = testGroup "Crypto.Macaroon.Verifier.Internal" [ sigs
, firstParty
]
{-
- Test fixtures
-}
sec = B8.pack "this is our super secret key; only we should know it"
m :: Macaroon
m = create sec key loc
where
key = B8.pack "we used our sec key"
loc = B8.pack "http://mybank/"
m2 :: Macaroon
m2 = addFirstPartyCaveat "test = caveat" m
vtest :: Caveat -> IO (Maybe (Either ValidationError ()))
vtest c = return $ if "test" `BS.isPrefixOf` cid c then
Just $ bool (Left (ValidatorError "Failed")) (Right ()) $ "test = caveat" == cid c
else Nothing
m3 :: Macaroon
m3 = addFirstPartyCaveat "value = 42" m2
vval :: Caveat -> IO (Maybe (Either ValidationError ()))
vval c = return $ if "value" `BS.isPrefixOf` cid c then
Just $ bool (Left (ValidatorError "Failed")) (Right ()) $ "value = 42" == cid c
else Nothing
{-
- Tests
-}
sigs = testProperty "Signatures" $ \sm -> verifySig (secret sm) (macaroon sm) == Right (macaroon sm)
firstParty = testGroup "First party caveats" [
testCase "Zero caveat" $ do
res <- verifyCavs [] m :: IO (Either ValidationError Macaroon)
Right m @=? res
, testCase "One caveat empty" $ do
res <- verifyCavs [] m2 :: IO (Either ValidationError Macaroon)
Left NoVerifier @=? res
, testCase "One caveat fail" $ do
res <- verifyCavs [vval] m2 :: IO (Either ValidationError Macaroon)
Left NoVerifier @=? res
, testCase "One caveat win" $ do
res <- verifyCavs [vtest] m2 :: IO (Either ValidationError Macaroon)
Right m2 @=? res
, testCase "Two caveat win" $ do
res <- verifyCavs [vtest, vval] m3 :: IO (Either ValidationError Macaroon)
Right m3 @=? res
]
|
