git.squeep.com Git - akkoma/blob - test/mfa_test.exs

   1 # Pleroma: A lightweight social networking server
   2 # Copyright © 2017-2018 Pleroma Authors <https://pleroma.social/>
   3 # SPDX-License-Identifier: AGPL-3.0-only
   4
   5 defmodule Pleroma.MFATest do
   6   use Pleroma.DataCase
   7
   8   import Pleroma.Factory
   9   alias Comeonin.Pbkdf2
  10   alias Pleroma.MFA
  11
  12   describe "mfa_settings" do
  13     test "returns settings user's" do
  14       user =
  15         insert(:user,
  16           multi_factor_authentication_settings: %MFA.Settings{
  17             enabled: true,
  18             totp: %MFA.Settings.TOTP{secret: "xx", confirmed: true}
  19           }
  20         )
  21
  22       settings = MFA.mfa_settings(user)
  23       assert match?(^settings, %{enabled: true, totp: true})
  24     end
  25   end
  26
  27   describe "generate backup codes" do
  28     test "returns backup codes" do
  29       user = insert(:user)
  30
  31       {:ok, [code1, code2]} = MFA.generate_backup_codes(user)
  32       updated_user = refresh_record(user)
  33       [hash1, hash2] = updated_user.multi_factor_authentication_settings.backup_codes
  34       assert Pbkdf2.checkpw(code1, hash1)
  35       assert Pbkdf2.checkpw(code2, hash2)
  36     end
  37   end
  38
  39   describe "invalidate_backup_code" do
  40     test "invalid used code" do
  41       user = insert(:user)
  42
  43       {:ok, _} = MFA.generate_backup_codes(user)
  44       user = refresh_record(user)
  45       assert length(user.multi_factor_authentication_settings.backup_codes) == 2
  46       [hash_code | _] = user.multi_factor_authentication_settings.backup_codes
  47
  48       {:ok, user} = MFA.invalidate_backup_code(user, hash_code)
  49
  50       assert length(user.multi_factor_authentication_settings.backup_codes) == 1
  51     end
  52   end
  53 end