67 lines
2.2 KiB
TypeScript
67 lines
2.2 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import {
|
|
exportCsv,
|
|
importCsv,
|
|
importOtpAuthList,
|
|
importPlainPskc,
|
|
} from "../../src/otp/migration";
|
|
import { utf8ToBytes } from "../../src/crypto/encoding";
|
|
import type { OtpProfile } from "../../src/otp/profile";
|
|
|
|
const profile: OtpProfile = {
|
|
kind: "totp",
|
|
account: 'alice,"admin"',
|
|
issuer: "Example",
|
|
secret: utf8ToBytes("12345678901234567890"),
|
|
algorithm: "SHA-256",
|
|
digits: 8,
|
|
period: 45,
|
|
counter: 0n,
|
|
extensions: new Map(),
|
|
};
|
|
|
|
describe("OTP migrations", () => {
|
|
it("round-trips the documented CSV including quoting", () => {
|
|
const result = importCsv(exportCsv([profile]));
|
|
expect(result.profiles[0]).toMatchObject({
|
|
account: profile.account,
|
|
issuer: "Example",
|
|
algorithm: "SHA-256",
|
|
digits: 8,
|
|
period: 45,
|
|
});
|
|
expect([...result.profiles[0]!.secret]).toEqual([...profile.secret]);
|
|
});
|
|
|
|
it("neutralizes spreadsheet formulas without changing a round trip", () => {
|
|
const dangerous = { ...profile, account: '=HYPERLINK("https://bad")' };
|
|
const csv = exportCsv([dangerous]);
|
|
expect(csv).toContain("'=HYPERLINK");
|
|
expect(importCsv(csv).profiles[0]!.account).toBe(dangerous.account);
|
|
});
|
|
|
|
it("reports the failing line in URI lists", () => {
|
|
expect(() =>
|
|
importOtpAuthList("otpauth://totp/Good?secret=JBSWY3DPEHPK3PXP\nnope"),
|
|
).toThrow(/Line 2/iu);
|
|
});
|
|
|
|
it("imports plain-secret PSKC and refuses encrypted keys", () => {
|
|
const xml = `<KeyContainer xmlns="urn:ietf:params:xml:ns:keyprov:pskc"><KeyPackage><Key Id="alice" Algorithm="urn:ietf:params:xml:ns:keyprov:pskc:totp"><Issuer>Example</Issuer><Data><Secret><PlainValue>MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=</PlainValue></Secret><TimeInterval><PlainValue>30</PlainValue></TimeInterval></Data><Policy><KeyUsage>OTP</KeyUsage></Policy><ResponseFormat Length="6" Encoding="DECIMAL"/></Key></KeyPackage></KeyContainer>`;
|
|
expect(importPlainPskc(xml).profiles[0]).toMatchObject({
|
|
kind: "totp",
|
|
account: "alice",
|
|
issuer: "Example",
|
|
digits: 6,
|
|
});
|
|
expect(() =>
|
|
importPlainPskc(
|
|
xml.replace(
|
|
"<PlainValue>MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=</PlainValue>",
|
|
"<EncryptedValue/>",
|
|
),
|
|
),
|
|
).toThrow(/encrypted/iu);
|
|
});
|
|
});
|