49 lines
1.7 KiB
Ruby
49 lines
1.7 KiB
Ruby
|
# frozen_string_literal: true
|
||
|
|
|
||
|
|
require 'spec_helper'
|
||
|
|
require 'webauthn/fake_client'
|
||
|
|
|
||
|
|
RSpec.describe Webauthn::AuthenticateService do
|
||
|
|
let(:client) { WebAuthn::FakeClient.new(origin) }
|
||
|
|
let(:user) { create(:user) }
|
||
|
|
let(:challenge) { Base64.strict_encode64(SecureRandom.random_bytes(32)) }
|
||
|
|
|
||
|
|
let(:origin) { 'http://localhost' }
|
||
|
|
|
||
|
|
before do
|
||
|
|
create_result = client.create(challenge: challenge) # rubocop:disable Rails/SaveBang
|
||
|
|
|
||
|
|
webauthn_credential = WebAuthn::Credential.from_create(create_result)
|
||
|
|
|
||
|
|
registration = WebauthnRegistration.new(credential_xid: Base64.strict_encode64(webauthn_credential.raw_id),
|
||
|
|
public_key: webauthn_credential.public_key,
|
||
|
|
counter: 0,
|
||
|
|
name: 'name',
|
||
|
|
user_id: user.id)
|
||
|
|
registration.save!
|
||
|
|
end
|
||
|
|
|
||
|
|
describe '#execute' do
|
||
|
|
it 'returns true if the response is valid and a matching stored credential is present' do
|
||
|
|
get_result = client.get(challenge: challenge)
|
||
|
|
|
||
|
|
get_result['clientExtensionResults'] = {}
|
||
|
|
service = Webauthn::AuthenticateService.new(user, get_result.to_json, challenge)
|
||
|
|
|
||
|
|
expect(service.execute).to be_truthy
|
||
|
|
end
|
||
|
|
|
||
|
|
it 'returns false if the response is valid but no matching stored credential is present' do
|
||
|
|
other_client = WebAuthn::FakeClient.new(origin)
|
||
|
|
other_client.create(challenge: challenge) # rubocop:disable Rails/SaveBang
|
||
|
|
|
||
|
|
get_result = other_client.get(challenge: challenge)
|
||
|
|
|
||
|
|
get_result['clientExtensionResults'] = {}
|
||
|
|
service = Webauthn::AuthenticateService.new(user, get_result.to_json, challenge)
|
||
|
|
|
||
|
|
expect(service.execute).to be_falsey
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|