* SPDX-License-Identifier: BSD-3-Clause
* Copyright (c) 2014 Red Hat Inc.
* Author: Stef Walter <stefw@redhat.com>
*/
#include "config.h"
#include "cockpitauthorize.h"
#include "testlib/cockpittest.h"
#include <sys/types.h>
#include <sys/wait.h>
#include <err.h>
#include <errno.h>
#include <pwd.h>
#include <string.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
static const char *expect_message;
static char *user;
static void
test_logger (const char *msg)
{
g_assert_nonnull (msg);
if (expect_message)
{
g_assert_nonnull (strstr (msg, expect_message));
expect_message = NULL;
}
else
{
warnx ("%s", msg);
}
}
static void
setup (char **user_ptr,
gconstpointer data)
{
struct passwd *pw;
expect_message = NULL;
pw = getpwuid (getuid ());
g_assert_nonnull (pw);
*user_ptr = g_strdup (pw->pw_name);
user = *user_ptr;
}
static void
teardown (char **user_ptr,
gconstpointer data)
{
if (expect_message)
g_assert_not_reached ();
g_free (*user_ptr);
user = NULL;
}
typedef struct {
const char *input;
const char *expected;
const char *ret;
int errn;
} ChallengeFixture;
static ChallengeFixture type_fixtures[] = {
{ "valid", "valid", "", 0 },
{ ":invalid", NULL, NULL, EINVAL },
{ "Basic more-data", "basic", "more-data", 0 },
{ "Basic more-data", "basic", "more-data", 0 },
{ "valid:test", "valid", "test", 0 },
{ "valid1:", "valid1", "", 0 },
{ "valid2:test:test", "valid2", "test:test", 0 },
{ NULL },
};
static void
test_type (char **user_ptr,
gconstpointer data)
{
const ChallengeFixture *fix = data;
const char *result;
g_autofree char *type = NULL;
result = cockpit_authorize_type (fix->input, &type);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpstr (result, ==, fix->ret);
g_assert_cmpstr (type, ==, fix->expected);
}
else
{
g_assert_null (result);
}
}
static ChallengeFixture subject_fixtures[] = {
{ "valid:73637275666679:", "73637275666679", "", 0 },
{ "valid:73637275666679:more-data", "73637275666679", "more-data", 0 },
{ "valid:scruffy:", "scruffy", "", 0 },
{ "X-Conversation conversationtoken more-data", "conversationtoken", "more-data", 0 },
{ "X-Conversation conversationtoken more-data", "conversationtoken", "more-data", 0 },
{ "invalid:", "73637275666679", NULL, EINVAL },
{ "invalid", NULL, NULL, EINVAL },
{ NULL },
};
static void
test_subject (char **user_ptr,
gconstpointer data)
{
const ChallengeFixture *fix = data;
const char *result;
g_autofree char *subject = NULL;
if (fix->ret == NULL)
expect_message = "\"authorize\" message";
result = cockpit_authorize_subject (fix->input, &subject);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpstr (result, ==, fix->ret);
g_assert_cmpstr (subject, ==, fix->expected);
}
else
{
g_assert_null (result);
}
}
static ChallengeFixture basic_fixtures[] = {
{ "Basic c2NydWZmeTp6ZXJvZw==", "scruffy", "zerog", 0 },
{ "Basic!c2NydWZmeTp6ZXJvZw==", NULL, NULL, EINVAL },
{ "Basic c2NydWZ!!eXplcm9n", NULL, NULL, EINVAL },
{ "Basic c2NydWZmeXplcm9n", NULL, NULL, EINVAL },
{ "Basic", NULL, "", 0 },
{ NULL },
};
static void
test_parse_basic (char **user_ptr,
gconstpointer data)
{
const ChallengeFixture *fix = data;
const char *original = "blah";
char *user = (char *)original;
g_autofree char *password = NULL;
if (fix->ret == NULL)
expect_message = "invalid";
password = cockpit_authorize_parse_basic (fix->input, &user);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpstr (password, ==, fix->ret);
if (fix->expected)
g_assert_cmpstr (user, ==, fix->expected);
else
g_assert_null (user);
}
else
{
g_assert_null (password);
g_assert_cmpstr (user, ==, "blah");
}
if (user != original)
g_free (user);
g_clear_pointer (&password, g_free);
if (fix->ret == NULL)
expect_message = "invalid";
password = cockpit_authorize_parse_basic (fix->input, NULL);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpstr (password, ==, fix->ret);
}
else
{
g_assert_null (password);
}
}
typedef struct {
const char *input;
size_t length;
const char *ret;
int errn;
} NegotiateFixture;
static NegotiateFixture parse_negotiate_fixtures[] = {
{ "Negotiate c2NydWZmeTp6ZXJvZw==", 13, "scruffy:zerog", 0 },
{ "Negotiate!c2NydWZmeTp6ZXJvZw==", 0, NULL, EINVAL },
{ "Negotiate c2Nyd!!ZmeTp6ZXJvZw==", 0, NULL, EINVAL },
{ "Negotiate", 0, "", 0 },
{ NULL },
};
static void
test_parse_negotiate (char **user_ptr,
gconstpointer data)
{
const NegotiateFixture *fix = data;
size_t length = 0xFFFFDD;
g_autofree void *result = NULL;
if (fix->ret == NULL)
expect_message = "invalid";
result = cockpit_authorize_parse_negotiate (fix->input, &length);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpuint (fix->length, ==, length);
g_assert_cmpint (memcmp (result, fix->ret, length), ==, 0);
}
else
{
g_assert_null (result);
g_assert_cmpuint (length, ==, 0xFFFFDD);
}
g_clear_pointer (&result, g_free);
if (fix->ret == NULL)
expect_message = "invalid";
result = cockpit_authorize_parse_negotiate (fix->input, NULL);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpint (memcmp (result, fix->ret, fix->length), ==, 0);
}
else
{
g_assert_null (result);
}
}
static NegotiateFixture build_negotiate_fixtures[] = {
{ "scruffy:zerog", 13, "Negotiate c2NydWZmeTp6ZXJvZw==", 0 },
{ NULL, 0, "Negotiate", 0, },
{ NULL },
};
static void
test_build_negotiate (char **user_ptr,
gconstpointer data)
{
const NegotiateFixture *fix = data;
g_autofree char *result = NULL;
if (fix->ret == NULL)
expect_message = "invalid";
result = cockpit_authorize_build_negotiate (fix->input, fix->length);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpstr (result, ==, fix->ret);
}
else
{
g_assert_null (result);
}
}
typedef struct {
const char *input;
const char *conversation;
const char *ret;
int errn;
} XConversationFixture;
static XConversationFixture parse_x_conversation_fixtures[] = {
{ "X-Conversation abcdefghi c2NydWZmeTp6ZXJvZw==", NULL, "scruffy:zerog", 0 },
{ "X-Conversation abcdefghi", NULL, "", 0 },
{ "X-Conversation abcdefghi c2NydW!!meTp6ZXJvZw==", NULL, NULL, EINVAL },
{ NULL },
};
static void
test_parse_x_conversation (char **user_ptr,
gconstpointer data)
{
const XConversationFixture *fix = data;
g_autofree char *result = NULL;
if (fix->ret == NULL)
expect_message = "invalid";
result = cockpit_authorize_parse_x_conversation (fix->input, NULL);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
g_assert_cmpstr (result, ==, fix->ret);
}
else
{
g_assert_null (result);
}
}
static XConversationFixture build_x_conversation_fixtures[] = {
{ "scruffy:zerog", "abcdefghi", "X-Conversation abcdefghi c2NydWZmeTp6ZXJvZw==", 0 },
{ "scruffy:zerog", NULL, " c2NydWZmeTp6ZXJvZw==", 0 },
{ "", "abcdefghi", "X-Conversation abcdefghi", 0 },
{ "scruffy:zerog", "", NULL, EINVAL },
{ NULL },
};
static void
test_build_x_conversation (char **user_ptr,
gconstpointer data)
{
const XConversationFixture *fix = data;
g_autofree char *conversation = NULL;
g_autofree char *result = NULL;
if (fix->ret == NULL)
expect_message = "invalid";
if (fix->conversation)
conversation = g_strdup (fix->conversation);
result = cockpit_authorize_build_x_conversation (fix->input, &conversation);
if (fix->errn != 0)
g_assert_cmpint (errno, ==, fix->errn);
if (fix->ret)
{
if (strstr (fix->ret, "X-Conversation"))
g_assert_cmpstr (result, ==, fix->ret);
else
g_assert_nonnull (strstr (result, fix->ret));
}
else
{
g_assert_null (result);
}
}
int
main (int argc,
char *argv[])
{
int i;
signal (SIGPIPE, SIG_IGN);
cockpit_authorize_logger (test_logger, 0);
cockpit_test_init (&argc, &argv);
for (i = 0; type_fixtures[i].input != NULL; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/type/%s", type_fixtures[i].input);
g_test_add (name, char *, type_fixtures + i,
setup, test_type, teardown);
}
for (i = 0; subject_fixtures[i].input != NULL; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/subject/%s", subject_fixtures[i].input);
g_test_add (name, char *, subject_fixtures + i,
setup, test_subject, teardown);
}
for (i = 0; basic_fixtures[i].input != NULL; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/basic/%s", basic_fixtures[i].input);
g_test_add (name, char *, basic_fixtures + i,
setup, test_parse_basic, teardown);
}
for (i = 0; parse_negotiate_fixtures[i].input != NULL; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/negotiate/parse/%s", parse_negotiate_fixtures[i].input);
g_test_add (name, char *, parse_negotiate_fixtures + i,
setup, test_parse_negotiate, teardown);
}
for (i = 0; build_negotiate_fixtures[i].ret != NULL; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/negotiate/build/%s", build_negotiate_fixtures[i].ret);
g_test_add (name, char *, build_negotiate_fixtures + i,
setup, test_build_negotiate, teardown);
}
for (i = 0; parse_x_conversation_fixtures[i].input != NULL; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/x-conversation/parse/%s", parse_x_conversation_fixtures[i].input);
g_test_add (name, char *, parse_x_conversation_fixtures + i,
setup, test_parse_x_conversation, teardown);
}
for (i = 0; build_x_conversation_fixtures[i].input || build_x_conversation_fixtures[i].ret; i++)
{
g_autofree gchar *name = g_strdup_printf ("/authorize/x-conversation/build/%d", i);
g_test_add (name, char *, build_x_conversation_fixtures + i,
setup, test_build_x_conversation, teardown);
}
return g_test_run ();
}
