foundation_auth 0.0.4

Authentication and authorization — OAuth2/OIDC flows, JWT handling, password hashing (Argon2), TOTP, and session management with Turso/SQLite and wasm-bindgen backends
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

//! AuthorizationCode and DeviceCode model tests.

use foundation_auth::server::models::code::{AuthorizationCode, DeviceCode};
use sha2::{Digest, Sha256};
use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine};
use std::time::Duration;

#[test]
fn test_auth_code_not_expired() {
    let code = AuthorizationCode::new(
        "u1".into(),
        "c1".into(),
        "https://example.com/cb".into(),
        None,
        "openid".into(),
        None,
        Duration::from_secs(600),
    );
    assert!(!code.is_expired());
    assert!(!code.code.is_empty());
}

#[test]
fn test_auth_code_pkce_verify() {
    let verifier = "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk";
    let mut hasher = Sha256::new();
    hasher.update(verifier.as_bytes());
    let challenge = URL_SAFE_NO_PAD.encode(hasher.finalize());

    let code = AuthorizationCode::new(
        "u1".into(),
        "c1".into(),
        "https://example.com/cb".into(),
        Some(challenge),
        "openid".into(),
        None,
        Duration::from_secs(600),
    );

    assert!(code.verify_pkce(verifier));
    assert!(!code.verify_pkce("wrong_verifier"));
}

#[test]
fn test_auth_code_pkce_none() {
    let code = AuthorizationCode::new(
        "u1".into(),
        "c1".into(),
        "https://example.com/cb".into(),
        None,
        "openid".into(),
        None,
        Duration::from_secs(600),
    );
    assert!(code.verify_pkce("anything"));
}

#[test]
fn test_device_code_creation() {
    let dc = DeviceCode::new("c1".into(), "openid".into(), Duration::from_secs(600), 5);
    assert!(!dc.is_expired());
    assert!(!dc.is_approved());
    assert!(dc.user_code.contains('-'));
    assert_eq!(dc.user_code.len(), 9);
}