124 lines
3.9 KiB
TypeScript
124 lines
3.9 KiB
TypeScript
|
|
import PasswordResetFormPost = require("../../../../src/server/lib/routes/password-reset/form/post");
|
|
import LdapClient = require("../../../../src/server/lib/LdapClient");
|
|
import AuthenticationSession = require("../../../../src/server/lib/AuthenticationSession");
|
|
import sinon = require("sinon");
|
|
import winston = require("winston");
|
|
import assert = require("assert");
|
|
import BluebirdPromise = require("bluebird");
|
|
|
|
import ExpressMock = require("../../mocks/express");
|
|
import { LdapClientMock } from "../../mocks/LdapClient";
|
|
import { UserDataStore } from "../../mocks/UserDataStore";
|
|
import ServerVariablesMock = require("../../mocks/ServerVariablesMock");
|
|
|
|
describe("test reset password route", function () {
|
|
let req: ExpressMock.RequestMock;
|
|
let res: ExpressMock.ResponseMock;
|
|
let user_data_store: UserDataStore;
|
|
let ldapClient: LdapClientMock;
|
|
let configuration: any;
|
|
let authSession: AuthenticationSession.AuthenticationSession;
|
|
|
|
beforeEach(function () {
|
|
req = {
|
|
body: {
|
|
userid: "user"
|
|
},
|
|
app: {
|
|
get: sinon.stub()
|
|
},
|
|
session: {},
|
|
headers: {
|
|
host: "localhost"
|
|
}
|
|
};
|
|
|
|
AuthenticationSession.reset(req as any);
|
|
authSession = AuthenticationSession.get(req as any);
|
|
authSession.userid = "user";
|
|
authSession.email = "user@example.com";
|
|
authSession.first_factor = true;
|
|
authSession.second_factor = false;
|
|
|
|
const options = {
|
|
inMemoryOnly: true
|
|
};
|
|
|
|
const mocks = ServerVariablesMock.mock(req.app);
|
|
user_data_store = UserDataStore();
|
|
user_data_store.set_u2f_meta.returns(BluebirdPromise.resolve({}));
|
|
user_data_store.get_u2f_meta.returns(BluebirdPromise.resolve({}));
|
|
user_data_store.issue_identity_check_token.returns(BluebirdPromise.resolve({}));
|
|
user_data_store.consume_identity_check_token.returns(BluebirdPromise.resolve({}));
|
|
mocks.userDataStore = user_data_store;
|
|
|
|
|
|
configuration = {
|
|
ldap: {
|
|
base_dn: "dc=example,dc=com",
|
|
user_name_attribute: "cn"
|
|
}
|
|
};
|
|
|
|
mocks.logger = winston;
|
|
mocks.config = configuration;
|
|
|
|
ldapClient = LdapClientMock();
|
|
mocks.ldap = ldapClient;
|
|
|
|
res = ExpressMock.ResponseMock();
|
|
});
|
|
|
|
describe("test reset password post", () => {
|
|
it("should update the password and reset auth_session for reauthentication", function () {
|
|
authSession.identity_check = {
|
|
userid: "user",
|
|
challenge: "reset-password"
|
|
};
|
|
req.body = {};
|
|
req.body.password = "new-password";
|
|
|
|
ldapClient.updatePassword.returns(BluebirdPromise.resolve());
|
|
ldapClient.checkPassword.returns(BluebirdPromise.resolve());
|
|
return PasswordResetFormPost.default(req as any, res as any)
|
|
.then(function () {
|
|
const authSession = AuthenticationSession.get(req as any);
|
|
assert.equal(res.status.getCall(0).args[0], 204);
|
|
assert.equal(authSession.first_factor, false);
|
|
assert.equal(authSession.second_factor, false);
|
|
return BluebirdPromise.resolve();
|
|
});
|
|
});
|
|
|
|
it("should fail if identity_challenge does not exist", function (done) {
|
|
authSession.identity_check = {
|
|
userid: "user",
|
|
challenge: undefined
|
|
};
|
|
res.send = sinon.spy(function () {
|
|
assert.equal(res.status.getCall(0).args[0], 403);
|
|
done();
|
|
});
|
|
PasswordResetFormPost.default(req as any, res as any);
|
|
});
|
|
|
|
it("should fail when ldap fails", function (done) {
|
|
authSession.identity_check = {
|
|
challenge: "reset-password",
|
|
userid: "user"
|
|
};
|
|
req.body = {};
|
|
req.body.password = "new-password";
|
|
|
|
ldapClient.checkPassword.yields(undefined);
|
|
ldapClient.updatePassword.returns(BluebirdPromise.reject("Internal error with LDAP"));
|
|
res.send = sinon.spy(function () {
|
|
assert.equal(res.status.getCall(0).args[0], 500);
|
|
done();
|
|
});
|
|
PasswordResetFormPost.default(req as any, res as any);
|
|
});
|
|
});
|
|
});
|