dmsg_protocol 0.2.0

Deterministic encoding, COSE document verification, and approval helpers for dMsg
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144

use super::*;

#[test]
fn uri_validation_preserves_canonical_identifiers() {
    for value in [
        "https://example.com/",
        "https://example.com:8443/a?b=c#d",
        "https://[::1]/",
        "https://xn--bcher-kva.example/%E4%B8%AD",
        "urn:example:person",
        "did:example:alice",
        "mailto:alice@example.com",
        "https://example.com/%2f%2F",
    ] {
        assert_eq!(validate_uri(value), Ok(()), "{value}");
    }
    for value in [
        "",
        "relative",
        "//example.com/",
        "https://example.com",
        "HTTPS://example.com/",
        "https://EXAMPLE.com/",
        "https://example.com:443/",
        "https://example.com/a/../b",
        "https://example.com/a\\b",
        "https://user@example.com/",
        "https://user:pass@example.com/",
        "https://example.com/中",
        "https://example.com/ ",
        "urn:test:\n",
        "urn:test:\0",
        "urn:test:\u{7f}",
        "https://example.com/%",
        "https://example.com/%0",
        "https://example.com/%xz",
    ] {
        assert!(validate_uri(value).is_err(), "{value:?}");
    }
}

#[test]
fn namespaces_and_account_issuers_cover_uri_forms() {
    for namespace in [
        "https://dmsg.test/u/",
        "https://[::1]:8443/u/",
        "urn:dmsg:",
        "did:dmsg:",
        "custom:",
        "custom:/",
        "custom://",
        "custom:///",
        "custom://host/",
        "custom://host/path:",
        "file:///accounts/",
    ] {
        validate_namespace(namespace).unwrap();
        for account in [AccountId([0; 12]), AccountId([1; 12]), AccountId([255; 12])] {
            let issuer = account_issuer(namespace, &account);
            assert_eq!(issuer, format!("{namespace}{account}"));
            validate_uri(&issuer).unwrap();
        }
    }
}

#[test]
fn namespaces_reject_ambiguous_suffixes() {
    for namespace in [
        "https://dmsg.test/u",
        "urn:dmsg",
        "https://dmsg.test/u/?q=/",
        "https://dmsg.test/u/#/",
        "https://dmsg.test/u/?",
        "https://user@dmsg.test/u/",
    ] {
        assert!(validate_namespace(namespace).is_err(), "{namespace}");
    }
}

#[test]
fn uri_and_namespace_byte_limits_allow_the_boundary() {
    let uri = format!("urn:{}", "a".repeat(MAX_URI_BYTES - 4));
    assert_eq!(validate_uri(&uri), Ok(()));
    assert!(validate_uri(&format!("{uri}a")).is_err());
    let namespace = format!("urn:{}:", "a".repeat(MAX_URI_BYTES - 64 - 5));
    assert_eq!(validate_namespace(&namespace), Ok(()));
    let account = AccountId([255; 12]);
    validate_uri(&account_issuer(&namespace, &account)).unwrap();
    assert!(validate_namespace(&format!("{namespace}:")).is_err());
}

#[test]
fn browser_origins_require_exact_https_or_extension_origins() {
    for origin in [
        "https://example.com",
        "https://example.com:8443",
        "https://[::1]",
        "https://xn--bcher-kva.example",
        "chrome-extension://abcdefghijklmnopabcdefghijklmnop",
    ] {
        assert_eq!(
            validate_origin(origin, &Environment::Production),
            Ok(()),
            "{origin}"
        );
    }
    for origin in [
        "",
        "null",
        "http://example.com",
        "https://example.com/",
        "https://EXAMPLE.com",
        "https://example.com:443",
        "https://user@example.com",
        "https://example.com?",
        "https://example.com#",
        "https://example.com/path",
        "https://example.com\n",
        " https://example.com",
        "https://bücher.example",
        "chrome-extension://abcdefghijklmnopabcdefghijklmnop/",
        "chrome-extension://abcdefghijklmnopabcdefghijklmnoq",
        "chrome-extension://abcdefghijklmnopabcdefghijklmno",
        "chrome-extension://abcdefghijklmnopabcdefghijklmnopa",
        "chrome-extension://ABCDEFGHIJKLMNOPABCDEFGHIJKLMNOP",
    ] {
        assert!(
            validate_origin(origin, &Environment::Local).is_err(),
            "{origin:?}"
        );
    }
    for origin in [
        "http://localhost:5188",
        "http://127.0.0.1:5188",
        "http://[::1]:5188",
    ] {
        assert_eq!(validate_origin(origin, &Environment::Local), Ok(()));
        assert!(validate_origin(origin, &Environment::Staging).is_err());
        assert!(validate_origin(&format!("{origin}/"), &Environment::Local).is_err());
    }
    let origin = format!("https://{}", "a".repeat(256 - 8));
    assert_eq!(validate_origin(&origin, &Environment::Production), Ok(()));
    assert!(validate_origin(&format!("{origin}a"), &Environment::Production).is_err());
}