2017-05-21 03:55:37 +07:00
|
|
|
|
|
|
|
|
|
import sinon = require("sinon");
|
|
|
|
|
import BluebirdPromise = require("bluebird");
|
|
|
|
|
import assert = require("assert");
|
|
|
|
|
import winston = require("winston");
|
|
|
|
|
|
2017-07-16 19:55:01 +07:00
|
|
|
|
import FirstFactorPost = require("../../../../../src/server/lib/routes/firstfactor/post");
|
|
|
|
|
import exceptions = require("../../../../../src/server/lib/Exceptions");
|
|
|
|
|
import AuthenticationSession = require("../../../../../src/server/lib/AuthenticationSession");
|
|
|
|
|
import Endpoints = require("../../../../../src/server/endpoints");
|
2017-05-25 20:09:29 +07:00
|
|
|
|
|
|
|
|
|
import AuthenticationRegulatorMock = require("../../mocks/AuthenticationRegulator");
|
2017-09-03 20:22:09 +07:00
|
|
|
|
import { AccessControllerStub } from "../../mocks/AccessControllerStub";
|
2017-05-25 20:09:29 +07:00
|
|
|
|
import ExpressMock = require("../../mocks/express");
|
|
|
|
|
import ServerVariablesMock = require("../../mocks/ServerVariablesMock");
|
2017-07-20 02:06:12 +07:00
|
|
|
|
import { ServerVariables } from "../../../../../src/server/lib/ServerVariablesHandler";
|
2017-05-21 03:55:37 +07:00
|
|
|
|
|
2017-05-22 04:32:09 +07:00
|
|
|
|
describe("test the first factor validation route", function () {
|
2017-05-21 17:14:59 +07:00
|
|
|
|
let req: ExpressMock.RequestMock;
|
|
|
|
|
let res: ExpressMock.ResponseMock;
|
2017-05-21 03:55:37 +07:00
|
|
|
|
let emails: string[];
|
|
|
|
|
let groups: string[];
|
|
|
|
|
let configuration;
|
2017-05-21 17:14:59 +07:00
|
|
|
|
let regulator: AuthenticationRegulatorMock.AuthenticationRegulatorMock;
|
2017-09-03 20:22:09 +07:00
|
|
|
|
let accessController: AccessControllerStub;
|
2017-07-16 22:37:13 +07:00
|
|
|
|
let serverVariables: ServerVariables;
|
2017-05-21 03:55:37 +07:00
|
|
|
|
|
2017-05-22 04:32:09 +07:00
|
|
|
|
beforeEach(function () {
|
2017-05-21 03:55:37 +07:00
|
|
|
|
configuration = {
|
|
|
|
|
ldap: {
|
|
|
|
|
base_dn: "ou=users,dc=example,dc=com",
|
|
|
|
|
user_name_attribute: "uid"
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
|
2017-05-22 04:32:09 +07:00
|
|
|
|
emails = ["test_ok@example.com"];
|
|
|
|
|
groups = ["group1", "group2" ];
|
2017-05-21 03:55:37 +07:00
|
|
|
|
|
2017-09-03 20:22:09 +07:00
|
|
|
|
accessController = new AccessControllerStub();
|
|
|
|
|
accessController.isAccessAllowedMock.returns(true);
|
2017-05-21 03:55:37 +07:00
|
|
|
|
|
2017-05-21 17:14:59 +07:00
|
|
|
|
regulator = AuthenticationRegulatorMock.AuthenticationRegulatorMock();
|
2017-05-21 03:55:37 +07:00
|
|
|
|
regulator.regulate.returns(BluebirdPromise.resolve());
|
|
|
|
|
regulator.mark.returns(BluebirdPromise.resolve());
|
|
|
|
|
|
|
|
|
|
req = {
|
|
|
|
|
app: {
|
2017-09-22 03:07:34 +07:00
|
|
|
|
get: sinon.stub().returns({ logger: winston })
|
2017-05-21 03:55:37 +07:00
|
|
|
|
},
|
|
|
|
|
body: {
|
|
|
|
|
username: "username",
|
|
|
|
|
password: "password"
|
|
|
|
|
},
|
|
|
|
|
session: {
|
2017-05-22 04:32:09 +07:00
|
|
|
|
},
|
|
|
|
|
headers: {
|
|
|
|
|
host: "home.example.com"
|
2017-05-21 03:55:37 +07:00
|
|
|
|
}
|
|
|
|
|
};
|
2017-05-25 20:09:29 +07:00
|
|
|
|
|
|
|
|
|
AuthenticationSession.reset(req as any);
|
|
|
|
|
|
2017-07-16 22:37:13 +07:00
|
|
|
|
serverVariables = ServerVariablesMock.mock(req.app);
|
|
|
|
|
serverVariables.ldapAuthenticator = {
|
|
|
|
|
authenticate: sinon.stub()
|
|
|
|
|
} as any;
|
|
|
|
|
serverVariables.config = configuration as any;
|
|
|
|
|
serverVariables.logger = winston as any;
|
|
|
|
|
serverVariables.regulator = regulator as any;
|
|
|
|
|
serverVariables.accessController = accessController as any;
|
2017-05-25 20:09:29 +07:00
|
|
|
|
|
2017-05-21 06:15:34 +07:00
|
|
|
|
res = ExpressMock.ResponseMock();
|
2017-05-21 03:55:37 +07:00
|
|
|
|
});
|
|
|
|
|
|
2017-09-22 22:53:18 +07:00
|
|
|
|
it("should reply with 204 if success", function () {
|
2017-07-16 22:37:13 +07:00
|
|
|
|
(serverVariables.ldapAuthenticator as any).authenticate.withArgs("username", "password")
|
|
|
|
|
.returns(BluebirdPromise.resolve({
|
|
|
|
|
emails: emails,
|
|
|
|
|
groups: groups
|
|
|
|
|
}));
|
2017-09-22 03:07:34 +07:00
|
|
|
|
let authSession: AuthenticationSession.AuthenticationSession;
|
|
|
|
|
return AuthenticationSession.get(req as any)
|
|
|
|
|
.then(function (_authSession: AuthenticationSession.AuthenticationSession) {
|
|
|
|
|
authSession = _authSession;
|
|
|
|
|
return FirstFactorPost.default(req as any, res as any);
|
|
|
|
|
})
|
2017-05-25 20:09:29 +07:00
|
|
|
|
.then(function () {
|
|
|
|
|
assert.equal("username", authSession.userid);
|
2017-09-22 22:53:18 +07:00
|
|
|
|
assert(res.send.calledOnce);
|
|
|
|
|
assert(res.status.calledWith(204));
|
2017-05-21 03:55:37 +07:00
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
2017-06-15 05:22:16 +07:00
|
|
|
|
it("should retrieve email from LDAP", function () {
|
2017-07-16 22:37:13 +07:00
|
|
|
|
(serverVariables.ldapAuthenticator as any).authenticate.withArgs("username", "password")
|
|
|
|
|
.returns(BluebirdPromise.resolve([{ mail: ["test@example.com"] }]));
|
2017-06-15 05:22:16 +07:00
|
|
|
|
return FirstFactorPost.default(req as any, res as any);
|
2017-05-21 03:55:37 +07:00
|
|
|
|
});
|
|
|
|
|
|
2017-06-15 05:22:16 +07:00
|
|
|
|
it("should set first email address as user session variable", function () {
|
2017-05-25 20:09:29 +07:00
|
|
|
|
const emails = ["test_ok@example.com"];
|
2017-09-22 03:07:34 +07:00
|
|
|
|
let authSession: AuthenticationSession.AuthenticationSession;
|
2017-07-16 22:37:13 +07:00
|
|
|
|
(serverVariables.ldapAuthenticator as any).authenticate.withArgs("username", "password")
|
|
|
|
|
.returns(BluebirdPromise.resolve({
|
|
|
|
|
emails: emails,
|
|
|
|
|
groups: groups
|
|
|
|
|
}));
|
2017-09-22 03:07:34 +07:00
|
|
|
|
|
|
|
|
|
return AuthenticationSession.get(req as any)
|
|
|
|
|
.then(function (_authSession: AuthenticationSession.AuthenticationSession) {
|
|
|
|
|
authSession = _authSession;
|
|
|
|
|
return FirstFactorPost.default(req as any, res as any);
|
|
|
|
|
})
|
2017-05-25 20:09:29 +07:00
|
|
|
|
.then(function () {
|
|
|
|
|
assert.equal("test_ok@example.com", authSession.email);
|
2017-05-21 03:55:37 +07:00
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
|
2017-07-16 22:37:13 +07:00
|
|
|
|
it("should return status code 401 when LDAP authenticator throws", function () {
|
|
|
|
|
(serverVariables.ldapAuthenticator as any).authenticate.withArgs("username", "password")
|
|
|
|
|
.returns(BluebirdPromise.reject(new exceptions.LdapBindError("Bad credentials")));
|
2017-06-15 05:22:16 +07:00
|
|
|
|
return FirstFactorPost.default(req as any, res as any)
|
|
|
|
|
.then(function () {
|
|
|
|
|
assert.equal(401, res.status.getCall(0).args[0]);
|
|
|
|
|
assert.equal(regulator.mark.getCall(0).args[0], "username");
|
|
|
|
|
});
|
2017-05-21 03:55:37 +07:00
|
|
|
|
});
|
|
|
|
|
|
2017-06-15 05:22:16 +07:00
|
|
|
|
it("should return status code 403 when regulator rejects authentication", function () {
|
2017-05-21 03:55:37 +07:00
|
|
|
|
const err = new exceptions.AuthenticationRegulationError("Authentication regulation...");
|
|
|
|
|
regulator.regulate.returns(BluebirdPromise.reject(err));
|
2017-06-15 05:22:16 +07:00
|
|
|
|
return FirstFactorPost.default(req as any, res as any)
|
|
|
|
|
.then(function () {
|
|
|
|
|
assert.equal(403, res.status.getCall(0).args[0]);
|
|
|
|
|
assert.equal(1, res.send.callCount);
|
|
|
|
|
});
|
|
|
|
|
});
|
2017-05-21 03:55:37 +07:00
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
|