1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
require 'spec_helper'
RSpec.describe ROTP::HOTP do
let(:counter) { 1234 }
let(:token) { '161024' }
let(:hotp) { ROTP::HOTP.new('a' * 32) }
describe '#at' do
let(:token) { hotp.at counter }
context 'only the counter as argument' do
it 'generates a string OTP' do
expect(token).to eq '161024'
end
end
context 'invalid counter' do
it 'raises an error' do
expect { hotp.at(-123_456) }.to raise_error(ArgumentError)
end
end
context 'RFC compatibility' do
let(:hotp) { ROTP::HOTP.new('GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ') }
it 'matches the RFC documentation examples' do
# 12345678901234567890 in Base32
# GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ
expect(hotp.at(0)).to eq '755224'
expect(hotp.at(1)).to eq '287082'
expect(hotp.at(2)).to eq '359152'
expect(hotp.at(3)).to eq '969429'
expect(hotp.at(4)).to eq '338314'
expect(hotp.at(5)).to eq '254676'
expect(hotp.at(6)).to eq '287922'
expect(hotp.at(7)).to eq '162583'
expect(hotp.at(8)).to eq '399871'
expect(hotp.at(9)).to eq '520489'
end
end
end
describe '#verify' do
let(:verification) { hotp.verify token, counter }
context 'numeric token' do
let(:token) { 161_024 }
it 'raises an error' do
expect { verification }.to raise_error(ArgumentError)
end
end
context 'string token' do
it 'is true' do
expect(verification).to be_truthy
end
end
context 'RFC compatibility' do
let(:hotp) { ROTP::HOTP.new('GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ') }
let(:token) { '520489' }
it 'verifies and does not allow reuse' do
expect(hotp.verify(token, 9)).to be_truthy
expect(hotp.verify(token, 10)).to be_falsey
end
end
describe 'with retries' do
let(:verification) { hotp.verify token, counter, retries: retries }
context 'counter outside than retries' do
let(:counter) { 1223 }
let(:retries) { 10 }
it 'is false' do
expect(verification).to be_falsey
end
end
context 'counter exactly in retry range' do
let(:counter) { 1224 }
let(:retries) { 10 }
it 'is true' do
expect(verification).to eq 1234
end
end
context 'counter in retry range' do
let(:counter) { 1224 }
let(:retries) { 11 }
it 'is true' do
expect(verification).to eq 1234
end
end
context 'counter ahead of token' do
let(:counter) { 1235 }
let(:retries) { 3 }
it 'is false' do
expect(verification).to be_falsey
end
end
end
end
describe '#provisioning_uri' do
it 'accepts the account name' do
expect(hotp.provisioning_uri('mark@percival'))
.to eq 'otpauth://hotp/mark%40percival?secret=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa&counter=0'
end
it 'also accepts a custom counter value' do
expect(hotp.provisioning_uri('mark@percival', 17))
.to eq 'otpauth://hotp/mark%40percival?secret=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa&counter=17'
end
end
end
|
