mirror of
https://github.com/go-gitea/gitea.git
synced 2026-10-10 15:46:48 +00:00
d16b20b972
Closes https://github.com/go-gitea/gitea/issues/39287 Security key nicknames could only be set at registration, so a skipped nickname left an auto-generated hex name until the key was re-registered. Each key now has a Rename button opening a dialog with the current nickname. A nickname used by another of the user's keys (case-insensitive) or a blank nickname is rejected. Renames are recorded as `user:webauth:rename` audit events. Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
71 lines
2.4 KiB
Go
71 lines
2.4 KiB
Go
// Copyright 2020 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package auth_test
|
|
|
|
import (
|
|
"testing"
|
|
|
|
auth_model "gitea.dev/models/auth"
|
|
"gitea.dev/models/unittest"
|
|
|
|
"github.com/go-webauthn/webauthn/webauthn"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestGetWebAuthnCredentialByID(t *testing.T) {
|
|
assert.NoError(t, unittest.PrepareTestDatabase())
|
|
|
|
res, err := auth_model.GetWebAuthnCredentialByID(t.Context(), 32, 1)
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, "WebAuthn credential", res.Name)
|
|
|
|
_, err = auth_model.GetWebAuthnCredentialByID(t.Context(), 99999, 1)
|
|
assert.Error(t, err)
|
|
assert.True(t, auth_model.IsErrWebAuthnCredentialNotExist(err))
|
|
|
|
_, err = auth_model.GetWebAuthnCredentialByID(t.Context(), 32, 99999)
|
|
assert.Error(t, err)
|
|
assert.True(t, auth_model.IsErrWebAuthnCredentialNotExist(err))
|
|
}
|
|
|
|
func TestGetWebAuthnCredentialsByUID(t *testing.T) {
|
|
assert.NoError(t, unittest.PrepareTestDatabase())
|
|
|
|
res, err := auth_model.GetWebAuthnCredentialsByUID(t.Context(), 32)
|
|
assert.NoError(t, err)
|
|
assert.Len(t, res, 1)
|
|
assert.Equal(t, "WebAuthn credential", res[0].Name)
|
|
}
|
|
|
|
func TestWebAuthnCredential_TableName(t *testing.T) {
|
|
assert.Equal(t, "webauthn_credential", auth_model.WebAuthnCredential{}.TableName())
|
|
}
|
|
|
|
func TestWebAuthnCredential_UpdateSignCount(t *testing.T) {
|
|
assert.NoError(t, unittest.PrepareTestDatabase())
|
|
cred := unittest.AssertExistsAndLoadBean(t, &auth_model.WebAuthnCredential{ID: 1})
|
|
cred.SignCount = 1
|
|
assert.NoError(t, cred.UpdateSignCount(t.Context()))
|
|
unittest.AssertExistsAndLoadBean(t, &auth_model.WebAuthnCredential{ID: 1, SignCount: 1})
|
|
}
|
|
|
|
func TestWebAuthnCredential_UpdateLargeCounter(t *testing.T) {
|
|
assert.NoError(t, unittest.PrepareTestDatabase())
|
|
cred := unittest.AssertExistsAndLoadBean(t, &auth_model.WebAuthnCredential{ID: 1})
|
|
cred.SignCount = 0xffffffff
|
|
assert.NoError(t, cred.UpdateSignCount(t.Context()))
|
|
unittest.AssertExistsAndLoadBean(t, &auth_model.WebAuthnCredential{ID: 1, SignCount: 0xffffffff})
|
|
}
|
|
|
|
func TestCreateCredential(t *testing.T) {
|
|
assert.NoError(t, unittest.PrepareTestDatabase())
|
|
|
|
res, err := auth_model.CreateCredential(t.Context(), 1, "WebAuthn Created Credential", &webauthn.Credential{ID: []byte("Test")})
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, "WebAuthn Created Credential", res.Name)
|
|
assert.Equal(t, []byte("Test"), res.CredentialID)
|
|
|
|
unittest.AssertExistsAndLoadBean(t, &auth_model.WebAuthnCredential{Name: "WebAuthn Created Credential", UserID: 1})
|
|
}
|