98 lines
2.6 KiB
Go
98 lines
2.6 KiB
Go
package auth
|
|
|
|
import (
|
|
"bytes"
|
|
"database/sql"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestStoreRequiresAndClearsExactMasterKey(t *testing.T) {
|
|
if _, err := Open(filepath.Join(t.TempDir(), "short.db"), make([]byte, 31)); err == nil {
|
|
t.Fatal("store accepted a non-256-bit master key")
|
|
}
|
|
key := bytes.Repeat([]byte{0x7a}, 32)
|
|
store, err := Open(filepath.Join(t.TempDir(), "auth.db"), key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer func() {
|
|
if err := store.Close(); err != nil {
|
|
t.Error(err)
|
|
}
|
|
}()
|
|
for index, value := range key {
|
|
if value != 0 {
|
|
t.Fatalf("master key byte %d was retained by the caller buffer", index)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestStoreMigratesSchemaV1ToV2(t *testing.T) {
|
|
path := filepath.Join(t.TempDir(), "auth.db")
|
|
store, err := Open(path, bytes.Repeat([]byte{0x61}, 32))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := store.Close(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
db, err := sql.Open("sqlite", path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := db.Exec(`DROP TABLE refresh_attempts; UPDATE metadata SET value='1' WHERE key='schema_version'`); err != nil {
|
|
if err := db.Close(); err != nil {
|
|
t.Error(err)
|
|
}
|
|
t.Fatal(err)
|
|
}
|
|
if err := db.Close(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
reopened, err := Open(path, bytes.Repeat([]byte{0x61}, 32))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer func() {
|
|
if err := reopened.Close(); err != nil {
|
|
t.Error(err)
|
|
}
|
|
}()
|
|
var version int
|
|
if err := reopened.db.QueryRow(`SELECT CAST(value AS INTEGER) FROM metadata WHERE key='schema_version'`).Scan(&version); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if version != 2 {
|
|
t.Fatalf("schema_version=%d, want 2", version)
|
|
}
|
|
var table string
|
|
if err := reopened.db.QueryRow(`SELECT name FROM sqlite_master WHERE type='table' AND name='refresh_attempts'`).Scan(&table); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func TestStorePersistsExplicitSchemaVersionAndRejectsUnknownVersion(t *testing.T) {
|
|
path := filepath.Join(t.TempDir(), "auth.db")
|
|
store, err := Open(path, bytes.Repeat([]byte{0x35}, 32))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
var version int
|
|
if err := store.db.QueryRow(`SELECT CAST(value AS INTEGER) FROM metadata WHERE key='schema_version'`).Scan(&version); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if version != schemaVersion {
|
|
t.Fatalf("schema_version=%d, want %d", version, schemaVersion)
|
|
}
|
|
if _, err := store.db.Exec(`UPDATE metadata SET value='999' WHERE key='schema_version'`); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := store.Close(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := Open(path, bytes.Repeat([]byte{0x35}, 32)); err == nil {
|
|
t.Fatal("store accepted an unknown schema version")
|
|
}
|
|
}
|