rustauth-passkey 0.3.0

Server-side passkey plugin for RustAuth.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

use rustauth_core::context::create_auth_context;
use rustauth_core::db::DbAdapter;
use rustauth_core::options::RustAuthOptions;
use rustauth_passkey::{passkey, PasskeyOptions, PasskeySchemaOptions};
use rustauth_sqlx::SqliteAdapter;
use sqlx::sqlite::SqlitePoolOptions;

#[tokio::test]
async fn sqlite_schema_migration_creates_passkeys_table_and_columns(
) -> Result<(), Box<dyn std::error::Error>> {
    let context = create_auth_context(RustAuthOptions {
        plugins: vec![passkey(PasskeyOptions::default())],
        secret: Some("secret-a-at-least-32-chars-long!!".to_owned()),
        ..RustAuthOptions::default()
    })?;
    let pool = SqlitePoolOptions::new()
        .max_connections(1)
        .connect("sqlite::memory:")
        .await?;
    let adapter = SqliteAdapter::with_schema(pool.clone(), context.db_schema.clone());

    adapter.create_schema(&context.db_schema, None).await?;

    let table_count: i64 = sqlx::query_scalar(
        "SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name = 'passkeys'",
    )
    .fetch_one(&pool)
    .await?;
    assert_eq!(table_count, 1);

    let columns = sqlx::query_scalar::<_, String>("SELECT name FROM pragma_table_info('passkeys')")
        .fetch_all(&pool)
        .await?;
    assert!(columns.iter().any(|column| column == "credential_id"));
    assert!(columns.iter().any(|column| column == "webauthn_credential"));
    assert!(columns
        .iter()
        .all(|column| !column.contains(char::is_uppercase)));

    let unique_credential_indexes: i64 = sqlx::query_scalar(
        "SELECT COUNT(*) FROM pragma_index_list('passkeys') il \
         JOIN pragma_index_info(il.name) ii \
         WHERE il.\"unique\" = 1 AND ii.name = 'credential_id'",
    )
    .fetch_one(&pool)
    .await?;
    assert_eq!(unique_credential_indexes, 1);

    Ok(())
}

#[tokio::test]
async fn sqlite_schema_migration_uses_custom_passkey_schema_names(
) -> Result<(), Box<dyn std::error::Error>> {
    let context = create_auth_context(RustAuthOptions {
        plugins: vec![passkey(
            PasskeyOptions::default().schema(
                PasskeySchemaOptions::new()
                    .table_name("auth_passkeys")
                    .field_name("public_key", "publicKey")
                    .field_name("credential_id", "credentialID")
                    .field_name("user_id", "userId"),
            ),
        )],
        secret: Some("secret-a-at-least-32-chars-long!!".to_owned()),
        ..RustAuthOptions::default()
    })?;
    let pool = SqlitePoolOptions::new()
        .max_connections(1)
        .connect("sqlite::memory:")
        .await?;
    let adapter = SqliteAdapter::with_schema(pool.clone(), context.db_schema.clone());

    adapter.create_schema(&context.db_schema, None).await?;

    let table_count: i64 = sqlx::query_scalar(
        "SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name = 'auth_passkeys'",
    )
    .fetch_one(&pool)
    .await?;
    assert_eq!(table_count, 1);

    let columns =
        sqlx::query_scalar::<_, String>("SELECT name FROM pragma_table_info('auth_passkeys')")
            .fetch_all(&pool)
            .await?;
    assert!(columns.iter().any(|column| column == "publicKey"));
    assert!(columns.iter().any(|column| column == "credentialID"));
    assert!(columns.iter().any(|column| column == "userId"));
    assert!(columns.iter().all(|column| column != "public_key"));
    assert!(columns.iter().all(|column| column != "credential_id"));

    let unique_credential_indexes: i64 = sqlx::query_scalar(
        "SELECT COUNT(*) FROM pragma_index_list('auth_passkeys') il \
         JOIN pragma_index_info(il.name) ii \
         WHERE il.\"unique\" = 1 AND ii.name = 'credentialID'",
    )
    .fetch_one(&pool)
    .await?;
    assert_eq!(unique_credential_indexes, 1);

    Ok(())
}