2008-11-23 14:29:11 +00:00
|
|
|
require 'abstract_unit'
|
|
|
|
|
2009-09-25 06:13:56 +00:00
|
|
|
begin
|
|
|
|
require 'openssl'
|
|
|
|
OpenSSL::Digest::SHA1
|
|
|
|
rescue LoadError, NameError
|
|
|
|
$stderr.puts "Skipping MessageVerifier test: broken OpenSSL install"
|
|
|
|
else
|
|
|
|
|
2009-11-14 19:37:06 +00:00
|
|
|
require 'active_support/time'
|
2011-09-15 12:28:53 +00:00
|
|
|
require 'active_support/json'
|
2009-11-14 19:37:06 +00:00
|
|
|
|
2011-09-15 19:51:30 +00:00
|
|
|
class MessageVerifierTest < ActiveSupport::TestCase
|
2011-09-15 17:15:21 +00:00
|
|
|
|
|
|
|
class JSONSerializer
|
|
|
|
def dump(value)
|
|
|
|
ActiveSupport::JSON.encode(value)
|
|
|
|
end
|
|
|
|
|
|
|
|
def load(value)
|
|
|
|
ActiveSupport::JSON.decode(value)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2008-11-23 14:29:11 +00:00
|
|
|
def setup
|
2009-09-25 06:13:56 +00:00
|
|
|
@verifier = ActiveSupport::MessageVerifier.new("Hey, I'm a secret!")
|
2010-03-29 05:51:48 +00:00
|
|
|
@data = { :some => "data", :now => Time.local(2010) }
|
2008-11-23 14:29:11 +00:00
|
|
|
end
|
2009-09-25 06:13:56 +00:00
|
|
|
|
2008-11-23 14:29:11 +00:00
|
|
|
def test_simple_round_tripping
|
2008-11-23 15:33:56 +00:00
|
|
|
message = @verifier.generate(@data)
|
|
|
|
assert_equal @data, @verifier.verify(message)
|
2008-11-23 14:29:11 +00:00
|
|
|
end
|
2009-09-25 06:13:56 +00:00
|
|
|
|
2009-10-05 12:27:54 +00:00
|
|
|
def test_missing_signature_raises
|
|
|
|
assert_not_verified(nil)
|
|
|
|
assert_not_verified("")
|
|
|
|
end
|
|
|
|
|
2008-11-23 14:29:11 +00:00
|
|
|
def test_tampered_data_raises
|
2008-11-23 15:33:56 +00:00
|
|
|
data, hash = @verifier.generate(@data).split("--")
|
2008-11-23 14:29:11 +00:00
|
|
|
assert_not_verified("#{data.reverse}--#{hash}")
|
|
|
|
assert_not_verified("#{data}--#{hash.reverse}")
|
2009-10-09 01:26:08 +00:00
|
|
|
assert_not_verified("purejunk")
|
2008-11-23 14:29:11 +00:00
|
|
|
end
|
2011-09-15 12:28:53 +00:00
|
|
|
|
|
|
|
def test_alternative_serialization_method
|
2011-09-15 18:27:12 +00:00
|
|
|
verifier = ActiveSupport::MessageVerifier.new("Hey, I'm a secret!", :serializer => JSONSerializer.new)
|
|
|
|
message = verifier.generate({ :foo => 123, 'bar' => Time.utc(2010) })
|
|
|
|
assert_equal verifier.verify(message), { "foo" => 123, "bar" => "2010-01-01T00:00:00Z" }
|
2011-09-15 12:28:53 +00:00
|
|
|
end
|
2011-09-15 19:51:30 +00:00
|
|
|
|
|
|
|
def test_digest_algorithm_as_second_parameter_deprecation
|
|
|
|
assert_deprecated(/options hash/) do
|
|
|
|
ActiveSupport::MessageVerifier.new("secret", "SHA1")
|
|
|
|
end
|
|
|
|
end
|
2009-09-25 06:13:56 +00:00
|
|
|
|
2008-11-23 14:29:11 +00:00
|
|
|
def assert_not_verified(message)
|
2009-03-08 20:11:58 +00:00
|
|
|
assert_raise(ActiveSupport::MessageVerifier::InvalidSignature) do
|
2008-11-23 15:33:56 +00:00
|
|
|
@verifier.verify(message)
|
2008-11-23 14:29:11 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2009-09-25 06:13:56 +00:00
|
|
|
|
|
|
|
end
|