authelia/test/server/routes/secondfactor/u2f/sign_request/get.test.ts

import sinon = require("sinon");
import BluebirdPromise = require("bluebird");
import assert = require("assert");
import U2FSignRequestGet = require("../../../../../../src/server/lib/routes/secondfactor/u2f/sign_request/get");
import AuthenticationSession = require("../../../../../../src/server/lib/AuthenticationSession");
import winston = require("winston");

import ExpressMock = require("../../../../mocks/express");
import UserDataStoreMock = require("../../../../mocks/UserDataStore");
import ServerVariablesMock = require("../../../../mocks/ServerVariablesMock");
import U2FMock = require("../../../../mocks/u2f");
import U2f = require("u2f");

import { SignMessage } from "../../../../../../src/server/lib/routes/secondfactor/u2f/sign_request/SignMessage";

describe("test u2f routes: sign_request", function () {
  let req: ExpressMock.RequestMock;
  let res: ExpressMock.ResponseMock;
  let userDataStore: UserDataStoreMock.UserDataStore;
  let mocks: ServerVariablesMock.ServerVariablesMock;
  let authSession: AuthenticationSession.AuthenticationSession;

  beforeEach(function () {
    req = ExpressMock.RequestMock();
    req.app = {};

    mocks = ServerVariablesMock.mock(req.app);
    mocks.logger = winston;

    req.session = {};

    AuthenticationSession.reset(req as any);
    authSession = AuthenticationSession.get(req as any);
    authSession.userid = "user";
    authSession.first_factor = true;
    authSession.second_factor = false;
    authSession.identity_check = {
      challenge: "u2f-register",
      userid: "user"
    };

    req.headers = {};
    req.headers.host = "localhost";

    const options = {
      inMemoryOnly: true
    };

    userDataStore = UserDataStoreMock.UserDataStore();
    userDataStore.set_u2f_meta = sinon.stub().returns(BluebirdPromise.resolve({}));
    userDataStore.get_u2f_meta = sinon.stub().returns(BluebirdPromise.resolve({}));
    mocks.userDataStore = userDataStore;

    res = ExpressMock.ResponseMock();
    res.send = sinon.spy();
    res.json = sinon.spy();
    res.status = sinon.spy();
  });

  describe("test signing request", test_signing_request);

  function test_signing_request() {
    it("should send back the sign request and save it in the session", function () {
      const expectedRequest: U2f.RegistrationResult = {
        keyHandle: "keyHandle",
        publicKey: "publicKey",
        certificate: "Certificate",
        successful: true
      };
      const u2f_mock = U2FMock.U2FMock();
      u2f_mock.request.returns(expectedRequest);

      mocks.u2f = u2f_mock;
      return U2FSignRequestGet.default(req as any, res as any)
        .then(function () {
          assert.deepEqual(expectedRequest, authSession.sign_request);
          assert.deepEqual(expectedRequest, res.json.getCall(0).args[0].request);
        });
    });
  }
});