ferrijs 0.2.0

#![allow(clippy::expect_used, clippy::unwrap_used)]
//! Web Crypto subset (`crypto` global): `randomUUID`,
//! `getRandomValues`, `subtle.digest`, HMAC `importKey`/`sign`/`verify`,
//! and the typed `NotSupportedError` rejections — exercised end-to-end
//! through `Runtime::eval_script` so the whole `QuickJS` dispatch path is
//! covered.

use ferrijs::{RunOptions, Runtime};

async fn run_ok(src: &str) -> serde_json::Value {
  let rt = Runtime::builder().build().await.expect("runtime");
  let result = rt.eval_script(src, &[], RunOptions::default()).await;
  match result.result {
    Ok(value) => value,
    Err(error) => panic!("script failed: {error:?}"),
  }
}

#[tokio::test]
async fn random_uuid_is_v4_and_unique() {
  let v = run_ok(
    r"
    const a = crypto.randomUUID();
    const b = crypto.randomUUID();
    const re = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
    return { aOk: re.test(a), bOk: re.test(b), distinct: a !== b };
  ",
  )
  .await;
  assert_eq!(v, serde_json::json!({ "aOk": true, "bOk": true, "distinct": true }));
}

#[tokio::test]
async fn get_random_values_fills_in_place_and_validates() {
  let v = run_ok(
    r"
    const buf = new Uint8Array(32);
    const ret = crypto.getRandomValues(buf);
    const filled = buf.some((b) => b !== 0);
    let floatRejected = false;
    try { crypto.getRandomValues(new Float64Array(4)); }
    catch (e) { floatRejected = e.name === 'TypeMismatchError'; }
    let quotaRejected = false;
    try { crypto.getRandomValues(new Uint8Array(65537)); }
    catch (e) { quotaRejected = e.name === 'QuotaExceededError'; }
    return { same: ret === buf, filled, floatRejected, quotaRejected };
  ",
  )
  .await;
  assert_eq!(
    v,
    serde_json::json!({ "same": true, "filled": true, "floatRejected": true, "quotaRejected": true })
  );
}

#[tokio::test]
async fn subtle_digest_matches_known_vectors() {
  // SHA-256("abc") and SHA-1("abc") — FIPS 180-2 test vectors.
  let v = run_ok(
    r"
    const hex = (ab) => Array.from(new Uint8Array(ab)).map((b) => b.toString(16).padStart(2, '0')).join('');
    const data = new TextEncoder().encode('abc');
    const s256 = hex(await crypto.subtle.digest('SHA-256', data));
    const s1 = hex(await crypto.subtle.digest({ name: 'sha-1' }, data));
    return { s256, s1 };
  ",
  )
  .await;
  assert_eq!(
    v,
    serde_json::json!({
      "s256": "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad",
      "s1": "a9993e364706816aba3e25717850c26c9cd0d89d"
    })
  );
}

#[tokio::test]
async fn hmac_sign_and_verify_round_trip() {
  // HMAC-SHA256(key="key", msg="The quick brown fox jumps over the lazy dog")
  let v = run_ok(
    r"
    const enc = new TextEncoder();
    const key = await crypto.subtle.importKey(
      'raw', enc.encode('key'), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign', 'verify']);
    const data = enc.encode('The quick brown fox jumps over the lazy dog');
    const sig = await crypto.subtle.sign('HMAC', key, data);
    const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, '0')).join('');
    const good = await crypto.subtle.verify('HMAC', key, sig, data);
    const tampered = new Uint8Array(sig); tampered[0] ^= 0xff;
    const bad = await crypto.subtle.verify('HMAC', key, tampered, data);
    return { hex, good, bad, type: key.type, algo: key.algorithm.hash.name };
  ",
  )
  .await;
  assert_eq!(
    v,
    serde_json::json!({
      "hex": "f7bc83f430538424b13298e6aa6fb143ef4d59a14946175997479dbc2d1a3cd8",
      "good": true,
      "bad": false,
      "type": "secret",
      "algo": "SHA-256"
    })
  );
}

#[tokio::test]
async fn subtle_generates_encrypts_and_derives() {
  // Everything this asserts used to reject with NotSupportedError: the
  // previous crypto binding implemented HMAC sign/verify and digest, and
  // nothing else.
  let v = run_ok(
    r"
    const enc = new TextEncoder();

    // AES-GCM: generate, encrypt, decrypt.
    const aes = await crypto.subtle.generateKey(
      { name: 'AES-GCM', length: 256 }, true, ['encrypt', 'decrypt']);
    const iv = crypto.getRandomValues(new Uint8Array(12));
    const cipher = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, aes, enc.encode('secret'));
    const plain = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, aes, cipher);
    const roundTrip = new TextDecoder().decode(plain);

    // ECDSA: generate a key pair, sign, verify.
    const pair = await crypto.subtle.generateKey(
      { name: 'ECDSA', namedCurve: 'P-256' }, true, ['sign', 'verify']);
    const message = enc.encode('signed');
    const signature = await crypto.subtle.sign(
      { name: 'ECDSA', hash: 'SHA-256' }, pair.privateKey, message);
    const verified = await crypto.subtle.verify(
      { name: 'ECDSA', hash: 'SHA-256' }, pair.publicKey, signature, message);

    // PBKDF2 -> raw bits.
    const material = await crypto.subtle.importKey(
      'raw', enc.encode('password'), 'PBKDF2', false, ['deriveBits']);
    const bits = await crypto.subtle.deriveBits(
      { name: 'PBKDF2', salt: enc.encode('salt'), iterations: 10, hash: 'SHA-256' }, material, 128);

    // Export the AES key back out as JWK.
    const jwk = await crypto.subtle.exportKey('jwk', aes);

    return {
      roundTrip,
      cipherDiffers: new TextDecoder('utf-8', { fatal: false }).decode(cipher) !== 'secret',
      keyType: aes.type,
      pairTypes: [pair.privateKey.type, pair.publicKey.type],
      verified,
      derivedBytes: bits.byteLength,
      jwkKty: jwk.kty,
    };
  ",
  )
  .await;
  assert_eq!(v["roundTrip"], "secret");
  assert_eq!(v["cipherDiffers"], serde_json::Value::Bool(true));
  assert_eq!(v["keyType"], "secret");
  assert_eq!(v["pairTypes"], serde_json::json!(["private", "public"]));
  assert_eq!(v["verified"], serde_json::Value::Bool(true));
  assert_eq!(v["derivedBytes"], 16);
  assert_eq!(v["jwkKty"], "oct");
}

#[tokio::test]
async fn node_crypto_module_hashes_and_random() {
  let v = run_ok(
    r"
    const { createHash, createHmac, randomBytes, randomInt, randomUUID } = require('node:crypto');
    return {
      sha256: createHash('sha256').update('abc').digest('hex'),
      hmac: createHmac('sha256', 'key').update('abc').digest('hex').length,
      randomBytes: randomBytes(8).length,
      randomIntInRange: (() => { const n = randomInt(1, 3); return n >= 1 && n < 3; })(),
      uuidShape: /^[0-9a-f]{8}-[0-9a-f]{4}-4/.test(randomUUID()),
    };
  ",
  )
  .await;
  assert_eq!(
    v["sha256"],
    "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad"
  );
  assert_eq!(v["hmac"], 64);
  assert_eq!(v["randomBytes"], 8);
  assert_eq!(v["randomIntInRange"], serde_json::Value::Bool(true));
  assert_eq!(v["uuidShape"], serde_json::Value::Bool(true));
}

/// A digest whose algorithm fails validation rejects with the
/// `NotSupportedError` it names, not with an uninitialized value: the
/// thrown exception is taken synchronously and re-thrown where the
/// promise is built (a local delta in `subtle/digest.rs`).
#[tokio::test]
async fn an_unsupported_digest_rejects_with_a_real_error() {
  let rt = Runtime::builder().build().await.expect("runtime");
  let run = rt
    .eval_script(
      r"
      try { await crypto.subtle.digest('NOPE', new Uint8Array(1)); return 'resolved'; }
      catch (e) { return [typeof e, e.name]; }
      ",
      &[],
      RunOptions::default(),
    )
    .await;
  assert_eq!(
    run.result.expect("run"),
    serde_json::json!(["object", "NotSupportedError"])
  );
}