Merge branch 'add-tests'

duosecurity · Jan 10, 2024 · e471b9f · e471b9f
2 parents ccd72f8 + f1b492b
commit e471b9f
Showing 1 changed file with 110 additions and 1 deletion.
diff --git a/tests/main.js b/tests/main.js
@@ -31,7 +31,7 @@ describe('Verifying rate limited request retries', function () {
     var date = new Date().toUTCString()
     var path = '/foo/bar'
     var sig = duo_sig.sign(
-      client.ikey, client.skey, 'GET', client.host, path, {}, date, client.sig_version, client.digestmod)
+      client.ikey, client.skey, 'GET', client.host, path, {}, date)
     var scope = nock('https://' + API_HOSTNAME, {
       reqheaders: {
         'Date': date,
@@ -89,3 +89,112 @@ describe('Verifying rate limited request retries', function () {
     })
   })
 })
+
+describe('Signature Checks', function () {
+  var params = {
+    'FakeParam': 'BogusValue',
+    'MoreFakeParams': 'MoreBogusValues'
+  }
+  function setupNock (requestHeaders = {}) {
+    const scope = nock('https://' + API_HOSTNAME, {
+      reqheaders: requestHeaders
+    })
+    return scope
+  }
+
+  it('V2 signature with GET', function (done) {
+    var path = '/foo/bar'
+    var date = new Date().toUTCString()
+    var sig = duo_sig.sign(
+      IKEY, SKEY, 'GET', API_HOSTNAME, path, params, date)
+    var requestHeaders = {
+      'Date': date,
+      'Host': API_HOSTNAME,
+      'Authorization': sig
+    }
+    var scope = setupNock(requestHeaders)
+    scope.get(/.*/)
+      .reply(200, {'response': {foo: 'bar'}, stat: 'OK'})
+      .log(console.log)
+
+    var client = new duo_api.Client(IKEY, SKEY, API_HOSTNAME)
+    client.jsonApiCall('GET', '/foo/bar', params, function (resp) {
+      console.log(resp)
+      assert.equal(resp.stat, 'OK')
+      done()
+    })
+  })
+
+  it('V2 signature with POST', function (done) {
+    var path = '/foo/bar'
+    var date = new Date().toUTCString()
+    var sig = duo_sig.sign(
+      IKEY, SKEY, 'POST', API_HOSTNAME, path, params, date)
+    var requestHeaders = {
+      'Date': date,
+      'Host': API_HOSTNAME,
+      'Authorization': sig,
+      'Content-type': 'application/x-www-form-urlencoded'
+    }
+    var scope = setupNock(requestHeaders)
+    scope.post(/.*/)
+      .reply(200, {'response': {foo: 'bar'}, stat: 'OK'})
+      .log(console.log)
+
+    var client = new duo_api.Client(IKEY, SKEY, API_HOSTNAME)
+    client.jsonApiCall('POST', '/foo/bar', params, function (resp) {
+      console.log(resp)
+      assert.equal(resp.stat, 'OK')
+      done()
+    })
+  })
+
+  it('V5 signature with GET', function (done) {
+    var path = '/foo/bar'
+    var date = new Date().toUTCString()
+    var body = ''
+    var sig = duo_sig.signV5(
+      IKEY, SKEY, 'GET', API_HOSTNAME, path, params, date, body)
+    var requestHeaders = {
+      'Date': date,
+      'Host': API_HOSTNAME,
+      'Authorization': sig
+    }
+    var scope = setupNock(requestHeaders)
+    scope.get(/.*/)
+      .reply(200, {'response': {foo: 'bar'}, stat: 'OK'})
+      .log(console.log)
+
+    var client = new duo_api.Client(IKEY, SKEY, API_HOSTNAME, duo_api.SIG_VERSION_5)
+    client.jsonApiCall('GET', '/foo/bar', params, function (resp) {
+      console.log(resp)
+      assert.equal(resp.stat, 'OK')
+      done()
+    })
+  })
+
+  it('V5 signature with POST', function (done) {
+    var path = '/foo/bar'
+    var date = new Date().toUTCString()
+    var body = JSON.stringify(params)
+    var sig = duo_sig.signV5(
+      IKEY, SKEY, 'POST', API_HOSTNAME, path, {}, date, body)
+    var requestHeaders = {
+      'Date': date,
+      'Host': API_HOSTNAME,
+      //'Authorization': sig,
+      'Content-type': 'application/json'
+    }
+    var scope = setupNock(requestHeaders)
+    scope.post(/.*/)
+      .reply(200, {'response': {foo: 'bar'}, stat: 'OK'})
+      .log(console.log)
+
+    var client = new duo_api.Client(IKEY, SKEY, API_HOSTNAME, duo_api.SIG_VERSION_5)
+    client.jsonApiCall('POST', '/foo/bar', params, function (resp) {
+      console.log(resp)
+      assert.equal(resp.stat, 'OK')
+      done()
+    })
+  })
+})