feat: release authentication diagnostics 0.2.0

2026-08-19 14:13:48 +02:00
parent 603559c540
commit 53cc91f2a5
41 changed files with 3472 additions and 154 deletions
@@ -0,0 +1,93 @@
+import { describe, expect, it } from "vitest";
+import {
+  importAegisBackup,
+  importAndOtpBackup,
+  importFreeOtpBackup,
+  importTwoFasBackup,
+} from "../../src/otp/vendor-backups";
+
+const secret = "JBSWY3DPEHPK3PXP";
+
+describe("vendor OTP backup importers", () => {
+  it("imports Aegis plaintext entries and skips non-portable token types", () => {
+    const result = importAegisBackup(
+      JSON.stringify({
+        db: {
+          entries: [
+            {
+              type: "totp",
+              name: "alice",
+              issuer: "Example",
+              info: { secret, algo: "SHA1", digits: 6, period: 30 },
+            },
+            { type: "steam", name: "game", issuer: "Steam", info: { secret } },
+          ],
+        },
+      }),
+    );
+    expect(result.profiles[0]).toMatchObject({
+      issuer: "Example",
+      account: "alice",
+    });
+    expect(result.warnings[0]).toMatch(/steam/iu);
+  });
+
+  it("imports 2FAS, andOTP and FreeOTP field layouts", () => {
+    expect(
+      importTwoFasBackup(
+        JSON.stringify({
+          services: [
+            {
+              name: "Example",
+              secret,
+              otp: {
+                account: "alice",
+                issuer: "Issuer",
+                tokenType: "TOTP",
+                algorithm: "SHA1",
+                digits: 6,
+                period: 30,
+              },
+            },
+          ],
+        }),
+      ).profiles[0],
+    ).toMatchObject({ account: "alice", issuer: "Issuer" });
+    expect(
+      importAndOtpBackup(
+        JSON.stringify([
+          {
+            secret,
+            issuer: "Example",
+            label: "bob",
+            type: "TOTP",
+            algorithm: "SHA1",
+            digits: 6,
+            period: 30,
+          },
+        ]),
+      ).profiles[0]!.account,
+    ).toBe("bob");
+    expect(
+      importFreeOtpBackup(
+        JSON.stringify([
+          {
+            secret: [49, 50, 51, 52],
+            issuerExt: "Example",
+            label: "carol",
+            type: "totp",
+            algo: "SHA1",
+            digits: 6,
+            period: 30,
+          },
+        ]),
+      ).profiles[0]!.account,
+    ).toBe("carol");
+  });
+
+  it("refuses encrypted Aegis content instead of guessing", () => {
+    expect(() =>
+      importAegisBackup(JSON.stringify({ db: "ciphertext", header: {} })),
+    ).toThrow(/encrypted/iu);
+  });
+});