1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/os_crypt/sync/keychain_password_mac.h"
#include "build/build_config.h"
#include "crypto/mock_apple_keychain.h"
#include "testing/gtest/include/gtest/gtest.h"
namespace {
using crypto::MockAppleKeychain;
// An environment for KeychainPassword which initializes mock keychain with
// the given value that is going to be returned when accessing the Keychain.
class KeychainPasswordEnvironment {
public:
// |keychain_result| is the value that is going to be returned when accessing
// the Keychain.
explicit KeychainPasswordEnvironment(OSStatus keychain_result);
~KeychainPasswordEnvironment() = default;
KeychainPasswordEnvironment(KeychainPasswordEnvironment&) = delete;
KeychainPasswordEnvironment& operator=(KeychainPasswordEnvironment&) = delete;
MockAppleKeychain& keychain() { return keychain_; }
std::string GetPassword() const { return keychain_password_->GetPassword(); }
private:
MockAppleKeychain keychain_;
std::unique_ptr<KeychainPassword> keychain_password_;
};
KeychainPasswordEnvironment::KeychainPasswordEnvironment(
OSStatus keychain_find_generic_result) {
// Set the value that keychain is going to return.
keychain_.set_find_generic_result(keychain_find_generic_result);
// Initialize keychain password.
keychain_password_ = std::make_unique<KeychainPassword>(keychain_);
}
// Test that if we have an existing password in the Keychain and we are
// authorized by the user to read it then we get it back correctly.
TEST(KeychainPasswordTest, FindPasswordSuccess) {
KeychainPasswordEnvironment environment(noErr);
EXPECT_FALSE(environment.GetPassword().empty());
EXPECT_FALSE(environment.keychain().called_add_generic());
}
// Test that if we do not have an existing password in the Keychain then it
// gets added successfully and returned.
TEST(KeychainPasswordTest, FindPasswordNotFound) {
KeychainPasswordEnvironment environment(errSecItemNotFound);
EXPECT_EQ(24U, environment.GetPassword().length());
EXPECT_TRUE(environment.keychain().called_add_generic());
}
// Test that if get denied access by the user then we return an empty password.
// And we should not try to add one.
TEST(KeychainPasswordTest, FindPasswordNotAuthorized) {
KeychainPasswordEnvironment environment(errSecAuthFailed);
EXPECT_TRUE(environment.GetPassword().empty());
EXPECT_FALSE(environment.keychain().called_add_generic());
}
// Test that if some random other error happens then we return an empty
// password, and we should not try to add one.
TEST(KeychainPasswordTest, FindPasswordOtherError) {
KeychainPasswordEnvironment environment(errSecNotAvailable);
EXPECT_TRUE(environment.GetPassword().empty());
EXPECT_FALSE(environment.keychain().called_add_generic());
}
// Test that subsequent additions to the keychain give different passwords.
TEST(KeychainPasswordTest, PasswordsDiffer) {
KeychainPasswordEnvironment environment1(errSecItemNotFound);
std::string password1 = environment1.GetPassword();
EXPECT_FALSE(password1.empty());
EXPECT_TRUE(environment1.keychain().called_add_generic());
KeychainPasswordEnvironment environment2(errSecItemNotFound);
std::string password2 = environment2.GetPassword();
EXPECT_FALSE(password2.empty());
EXPECT_TRUE(environment2.keychain().called_add_generic());
// And finally check that the passwords are different.
EXPECT_NE(password1, password2);
}
} // namespace
|
