forked from Silverfish/proton-bridge
242 lines
8.5 KiB
Go
242 lines
8.5 KiB
Go
// Copyright (c) 2020 Proton Technologies AG
|
|
//
|
|
// This file is part of ProtonMail Bridge.
|
|
//
|
|
// ProtonMail Bridge is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// ProtonMail Bridge is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with ProtonMail Bridge. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
package users
|
|
|
|
import (
|
|
"errors"
|
|
"testing"
|
|
|
|
"github.com/ProtonMail/proton-bridge/internal/events"
|
|
"github.com/ProtonMail/proton-bridge/internal/metrics"
|
|
"github.com/ProtonMail/proton-bridge/internal/users/credentials"
|
|
"github.com/ProtonMail/proton-bridge/pkg/pmapi"
|
|
gomock "github.com/golang/mock/gomock"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestUsersFinishLoginBadMailboxPassword(t *testing.T) {
|
|
m := initMocks(t)
|
|
defer m.ctrl.Finish()
|
|
|
|
err := errors.New("bad password")
|
|
gomock.InOrder(
|
|
// Init users with no user from keychain.
|
|
m.credentialsStore.EXPECT().List().Return([]string{}, nil),
|
|
|
|
// Set up mocks for FinishLogin.
|
|
m.pmapiClient.EXPECT().AuthSalt().Return("", nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(err),
|
|
m.pmapiClient.EXPECT().DeleteAuth(),
|
|
m.pmapiClient.EXPECT().Logout(),
|
|
)
|
|
|
|
checkUsersFinishLogin(t, m, testAuth, testCredentials.MailboxPassword, "", err)
|
|
}
|
|
|
|
func TestUsersFinishLoginUpgradeApplication(t *testing.T) {
|
|
m := initMocks(t)
|
|
defer m.ctrl.Finish()
|
|
|
|
err := errors.New("Cannot logout when upgrade needed")
|
|
gomock.InOrder(
|
|
// Init users with no user from keychain.
|
|
m.credentialsStore.EXPECT().List().Return([]string{}, nil),
|
|
|
|
// Set up mocks for FinishLogin.
|
|
m.pmapiClient.EXPECT().AuthSalt().Return("", nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(pmapi.ErrUpgradeApplication),
|
|
|
|
m.eventListener.EXPECT().Emit(events.UpgradeApplicationEvent, ""),
|
|
m.pmapiClient.EXPECT().DeleteAuth().Return(err),
|
|
m.pmapiClient.EXPECT().Logout(),
|
|
)
|
|
|
|
checkUsersFinishLogin(t, m, testAuth, testCredentials.MailboxPassword, "", pmapi.ErrUpgradeApplication)
|
|
}
|
|
|
|
func refreshWithToken(token string) *pmapi.Auth {
|
|
return &pmapi.Auth{
|
|
RefreshToken: token,
|
|
}
|
|
}
|
|
|
|
func credentialsWithToken(token string) *credentials.Credentials {
|
|
tmp := &credentials.Credentials{}
|
|
*tmp = *testCredentials
|
|
tmp.APIToken = token
|
|
return tmp
|
|
}
|
|
|
|
func TestUsersFinishLoginNewUser(t *testing.T) {
|
|
m := initMocks(t)
|
|
defer m.ctrl.Finish()
|
|
|
|
// Basically every call client has get client manager
|
|
m.clientManager.EXPECT().GetClient("user").Return(m.pmapiClient).MinTimes(1)
|
|
|
|
gomock.InOrder(
|
|
// users.New() finds no users in keychain.
|
|
m.credentialsStore.EXPECT().List().Return([]string{}, nil),
|
|
|
|
// getAPIUser() loads user info from API (e.g. userID).
|
|
m.pmapiClient.EXPECT().AuthSalt().Return("", nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(nil),
|
|
m.pmapiClient.EXPECT().CurrentUser().Return(testPMAPIUser, nil),
|
|
|
|
// addNewUser()
|
|
m.pmapiClient.EXPECT().AuthRefresh(":tok").Return(refreshWithToken("afterLogin"), nil),
|
|
m.pmapiClient.EXPECT().CurrentUser().Return(testPMAPIUser, nil),
|
|
m.pmapiClient.EXPECT().Addresses().Return([]*pmapi.Address{testPMAPIAddress}),
|
|
m.credentialsStore.EXPECT().Add("user", "username", ":afterLogin", testCredentials.MailboxPassword, []string{testPMAPIAddress.Email}),
|
|
m.credentialsStore.EXPECT().Get("user").Return(credentialsWithToken(":afterLogin"), nil),
|
|
|
|
// user.init() in addNewUser
|
|
m.credentialsStore.EXPECT().Get("user").Return(credentialsWithToken(":afterLogin"), nil),
|
|
m.pmapiClient.EXPECT().AuthRefresh(":afterLogin").Return(refreshWithToken("afterCredentials"), nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(nil),
|
|
|
|
// store.New() in user.init
|
|
m.pmapiClient.EXPECT().ListLabels().Return([]*pmapi.Label{}, nil),
|
|
m.pmapiClient.EXPECT().CountMessages("").Return([]*pmapi.MessagesCount{}, nil),
|
|
m.pmapiClient.EXPECT().Addresses().Return([]*pmapi.Address{testPMAPIAddress}),
|
|
|
|
// Emit event for new user and send metrics.
|
|
m.clientManager.EXPECT().GetAnonymousClient().Return(m.pmapiClient),
|
|
m.pmapiClient.EXPECT().SendSimpleMetric(string(metrics.Setup), string(metrics.NewUser), string(metrics.NoLabel)),
|
|
m.pmapiClient.EXPECT().Logout(),
|
|
|
|
// Reload account list in GUI.
|
|
m.eventListener.EXPECT().Emit(events.UserRefreshEvent, "user"),
|
|
|
|
// defer logout anonymous
|
|
m.pmapiClient.EXPECT().Logout(),
|
|
)
|
|
|
|
mockEventLoopNoAction(m)
|
|
|
|
user := checkUsersFinishLogin(t, m, testAuth, testCredentials.MailboxPassword, "user", nil)
|
|
|
|
mockAuthUpdate(user, "afterCredentials", m)
|
|
}
|
|
|
|
func TestUsersFinishLoginExistingDisconnectedUser(t *testing.T) {
|
|
m := initMocks(t)
|
|
defer m.ctrl.Finish()
|
|
|
|
loggedOutCreds := *testCredentials
|
|
loggedOutCreds.APIToken = ""
|
|
loggedOutCreds.MailboxPassword = ""
|
|
|
|
m.clientManager.EXPECT().GetClient("user").Return(m.pmapiClient).MinTimes(1)
|
|
|
|
gomock.InOrder(
|
|
// users.New() finds one existing user in keychain.
|
|
m.credentialsStore.EXPECT().List().Return([]string{"user"}, nil),
|
|
|
|
// newUser()
|
|
m.credentialsStore.EXPECT().Get("user").Return(&loggedOutCreds, nil),
|
|
|
|
// user.init()
|
|
m.credentialsStore.EXPECT().Get("user").Return(&loggedOutCreds, nil),
|
|
|
|
// store.New() in user.init
|
|
m.pmapiClient.EXPECT().ListLabels().Return(nil, pmapi.ErrInvalidToken),
|
|
m.pmapiClient.EXPECT().Addresses().Return(nil),
|
|
|
|
// getAPIUser() loads user info from API (e.g. userID).
|
|
m.pmapiClient.EXPECT().AuthSalt().Return("", nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(nil),
|
|
m.pmapiClient.EXPECT().CurrentUser().Return(testPMAPIUser, nil),
|
|
|
|
// connectExistingUser()
|
|
m.credentialsStore.EXPECT().UpdatePassword("user", testCredentials.MailboxPassword).Return(nil),
|
|
m.pmapiClient.EXPECT().AuthRefresh(":tok").Return(refreshWithToken("afterLogin"), nil),
|
|
m.credentialsStore.EXPECT().UpdateToken("user", ":afterLogin").Return(nil),
|
|
|
|
// user.init() in connectExistingUser
|
|
m.credentialsStore.EXPECT().Get("user").Return(credentialsWithToken(":afterLogin"), nil),
|
|
m.pmapiClient.EXPECT().AuthRefresh(":afterLogin").Return(refreshWithToken("afterCredentials"), nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(nil),
|
|
|
|
// store.New() in user.init
|
|
m.pmapiClient.EXPECT().ListLabels().Return([]*pmapi.Label{}, nil),
|
|
m.pmapiClient.EXPECT().CountMessages("").Return([]*pmapi.MessagesCount{}, nil),
|
|
m.pmapiClient.EXPECT().Addresses().Return([]*pmapi.Address{testPMAPIAddress}),
|
|
|
|
// Reload account list in GUI.
|
|
m.eventListener.EXPECT().Emit(events.UserRefreshEvent, "user"),
|
|
|
|
// defer logout anonymous
|
|
m.pmapiClient.EXPECT().Logout(),
|
|
)
|
|
|
|
mockEventLoopNoAction(m)
|
|
|
|
user := checkUsersFinishLogin(t, m, testAuth, testCredentials.MailboxPassword, "user", nil)
|
|
|
|
mockAuthUpdate(user, "afterCredentials", m)
|
|
}
|
|
|
|
func TestUsersFinishLoginConnectedUser(t *testing.T) {
|
|
m := initMocks(t)
|
|
defer m.ctrl.Finish()
|
|
|
|
m.clientManager.EXPECT().GetClient("user").Return(m.pmapiClient).MinTimes(1)
|
|
m.credentialsStore.EXPECT().List().Return([]string{"user"}, nil)
|
|
|
|
mockConnectedUser(m)
|
|
mockEventLoopNoAction(m)
|
|
|
|
users := testNewUsers(t, m)
|
|
defer cleanUpUsersData(users)
|
|
|
|
// Then, try to log in again...
|
|
gomock.InOrder(
|
|
m.pmapiClient.EXPECT().AuthSalt().Return("", nil),
|
|
m.pmapiClient.EXPECT().Unlock([]byte(testCredentials.MailboxPassword)).Return(nil),
|
|
m.pmapiClient.EXPECT().CurrentUser().Return(testPMAPIUser, nil),
|
|
m.pmapiClient.EXPECT().DeleteAuth(),
|
|
m.pmapiClient.EXPECT().Logout(),
|
|
)
|
|
|
|
_, err := users.FinishLogin(m.pmapiClient, testAuth, testCredentials.MailboxPassword)
|
|
assert.Equal(t, "user is already connected", err.Error())
|
|
}
|
|
|
|
func checkUsersFinishLogin(t *testing.T, m mocks, auth *pmapi.Auth, mailboxPassword string, expectedUserID string, expectedErr error) *User {
|
|
users := testNewUsers(t, m)
|
|
defer cleanUpUsersData(users)
|
|
|
|
user, err := users.FinishLogin(m.pmapiClient, auth, mailboxPassword)
|
|
|
|
waitForEvents()
|
|
|
|
assert.Equal(t, expectedErr, err)
|
|
|
|
if expectedUserID != "" {
|
|
assert.Equal(t, expectedUserID, user.ID())
|
|
assert.Equal(t, 1, len(users.users))
|
|
assert.Equal(t, expectedUserID, users.users[0].ID())
|
|
} else {
|
|
assert.Equal(t, (*User)(nil), user)
|
|
assert.Equal(t, 0, len(users.users))
|
|
}
|
|
|
|
return user
|
|
}
|