Node / ReticulumProjects / MeshChatX.git / files / tests / backend / test_altcha_oracle.py

Displaying Raw • Download

T8b949e# SPDX-License-Identifier: 0BSD

T8b949e"""Oracle: ALTCHA challenge round-trip and login rejection without payload."""

Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations

Tff7b72import T7ee787base64

Tff7b72import T7ee787json

Tff7b72import T7ee787os

Tff7b72import T7ee787time

Tff7b72from T7ee787unittestT7ee787.T7ee787mock Tff7b72import Te6edf3patch

Tff7b72import T7ee787altcha

Tff7b72import T7ee787bcrypt

Tff7b72import T7ee787pytest

Tff7b72from T7ee787aiohttpT7ee787.T7ee787test_utils Tff7b72import Te6edf3TestClientTb4b4b4, Te6edf3TestServer

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787altcha_auth Tff7b72import Tb4b4b4(

Te6edf3ALTCHA_INVALID_CODETb4b4b4,

Te6edf3verify_altcha_submissionTb4b4b4,

Tb4b4b4)

Tff7b72from T7ee787testsT7ee787.T7ee787backendT7ee787.T7ee787demo_http_support Tff7b72import Te6edf3build_test_aio_app

Tff7b72from T7ee787testsT7ee787.T7ee787backendT7ee787.T7ee787conftest Tff7b72import Te6edf3fetch_api_csrf_headers

Te6edf3_TEST_SECRET Tff7b72= Ta5d6ff"Ta5d6fftest-secret-key-32chars-minimum!!Ta5d6ff"

Tff7b72def Td2a8ff_solved_payload_b64Tb4b4b4(Te6edf3secretTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:

Te6edf3challenge Tff7b72= Te6edf3altchaTff7b72.Td2a8ffcreate_challengeTb4b4b4(

Ta5d6ff"Ta5d6ffPBKDF2/SHA-256Ta5d6ff"Tb4b4b4,

T79c0ff200Tb4b4b4,

Te6edf3hmac_secretTff7b72=Te6edf3secretTb4b4b4,

Te6edf3expires_atTff7b72=Tffa657intTb4b4b4(Te6edf3timeTff7b72.Td2a8fftimeTb4b4b4(Tb4b4b4)Tb4b4b4) Tff7b72+ T79c0ff300Tb4b4b4,

Tb4b4b4)

Te6edf3solution Tff7b72= Te6edf3altchaTff7b72.Td2a8ffsolve_challengeTb4b4b4(Te6edf3challengeTb4b4b4, Te6edf3counter_stepTff7b72=T79c0ff1Tb4b4b4)

Tff7b72assert Te6edf3solution Tff7b72is Tff7b72not Tff7b72None

Te6edf3payload Tff7b72= Te6edf3altchaTff7b72.Td2a8ffPayloadTb4b4b4(Te6edf3challengeTb4b4b4, Te6edf3solutionTb4b4b4)

Te6edf3raw Tff7b72= Te6edf3jsonTff7b72.Td2a8ffdumpsTb4b4b4(Te6edf3payloadTff7b72.Td2a8ffto_dictTb4b4b4(Tb4b4b4)Tb4b4b4)

Tff7b72return Te6edf3base64Tff7b72.Td2a8ffb64encodeTb4b4b4(Te6edf3rawTff7b72.Td2a8ffencodeTb4b4b4(Tb4b4b4)Tb4b4b4)Tff7b72.Td2a8ffdecodeTb4b4b4(Tb4b4b4)

Tff7b72def Td2a8fftest_altcha_verify_round_tripTb4b4b4(Tb4b4b4)Tb4b4b4:

Tff7b72with Te6edf3patchTff7b72.Td2a8ffdictTb4b4b4(

Te6edf3osTff7b72.Td2a8ffenvironTb4b4b4, Tb4b4b4{Ta5d6ff"Ta5d6ffMESHCHAT_ALTCHA_HMAC_KEYTa5d6ff"Tb4b4b4: Te6edf3_TEST_SECRETTb4b4b4}Tb4b4b4, Te6edf3clearTff7b72=Tff7b72False

Tb4b4b4)Tb4b4b4:

Te6edf3okTb4b4b4, Te6edf3code Tff7b72= Te6edf3verify_altcha_submissionTb4b4b4(Te6edf3_solved_payload_b64Tb4b4b4(Te6edf3_TEST_SECRETTb4b4b4)Tb4b4b4)

Tff7b72assert Te6edf3ok Tff7b72is Tff7b72True

Tff7b72assert Te6edf3code Tff7b72is Tff7b72None

Tff7b72def Td2a8fftest_altcha_rejects_tampered_payloadTb4b4b4(Tb4b4b4)Tb4b4b4:

Tff7b72with Te6edf3patchTff7b72.Td2a8ffdictTb4b4b4(

Te6edf3osTff7b72.Td2a8ffenvironTb4b4b4, Tb4b4b4{Ta5d6ff"Ta5d6ffMESHCHAT_ALTCHA_HMAC_KEYTa5d6ff"Tb4b4b4: Te6edf3_TEST_SECRETTb4b4b4}Tb4b4b4, Te6edf3clearTff7b72=Tff7b72False

Tb4b4b4)Tb4b4b4:

Te6edf3bad Tff7b72= Te6edf3_solved_payload_b64Tb4b4b4(Te6edf3_TEST_SECRETTb4b4b4)Tb4b4b4[Tb4b4b4:Tff7b72-T79c0ff4Tb4b4b4] Tff7b72+ Ta5d6ff"Ta5d6ffXXXXTa5d6ff"

Te6edf3okTb4b4b4, Te6edf3code Tff7b72= Te6edf3verify_altcha_submissionTb4b4b4(Te6edf3badTb4b4b4)

Tff7b72assert Te6edf3ok Tff7b72is Tff7b72False

Tff7b72assert Te6edf3code Tff7b72is Tff7b72not Tff7b72None

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_login_without_altcha_when_enabledTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffaltcha_enabled Tff7b72= Tff7b72True

Te6edf3mock_appTff7b72.Td2a8ffdemo_mode Tff7b72= Tff7b72False

Te6edf3mock_appTff7b72.Td2a8ffcurrent_contextTff7b72.Td2a8ffrunning Tff7b72= Tff7b72True

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3password_hash Tff7b72= Te6edf3bcryptTff7b72.Td2a8ffhashpwTb4b4b4(Ta5d6ffbTa5d6ff"Ta5d6ffsecretpassTa5d6ff"Tb4b4b4, Te6edf3bcryptTff7b72.Td2a8ffgensaltTb4b4b4(Tb4b4b4)Tb4b4b4)Tff7b72.Td2a8ffdecodeTb4b4b4(Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_password_hashTff7b72.Td2a8ffsetTb4b4b4(Te6edf3password_hashTb4b4b4)

Te6edf3env Tff7b72= Tb4b4b4{

Ta5d6ff"Ta5d6ffMESHCHAT_ALTCHA_ENABLEDTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ff1Ta5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffMESHCHAT_ALTCHA_HMAC_KEYTa5d6ff"Tb4b4b4: Te6edf3_TEST_SECRETTb4b4b4,

Tb4b4b4}

Te6edf3aio_app Tff7b72= Te6edf3build_test_aio_appTb4b4b4(Te6edf3mock_appTb4b4b4)

Tff7b72async Tff7b72with Te6edf3TestClientTb4b4b4(Te6edf3TestServerTb4b4b4(Te6edf3aio_appTb4b4b4)Tb4b4b4) Tff7b72as Te6edf3clientTb4b4b4:

Tff7b72with Te6edf3patchTff7b72.Td2a8ffdictTb4b4b4(Te6edf3osTff7b72.Td2a8ffenvironTb4b4b4, Te6edf3envTb4b4b4, Te6edf3clearTff7b72=Tff7b72FalseTb4b4b4)Tb4b4b4:

Te6edf3headers Tff7b72= Tff7b72await Te6edf3fetch_api_csrf_headersTb4b4b4(Te6edf3clientTb4b4b4)

Te6edf3response Tff7b72= Tff7b72await Te6edf3clientTff7b72.Td2a8ffpostTb4b4b4(

Ta5d6ff"Ta5d6ff/api/v1/auth/loginTa5d6ff"Tb4b4b4,

Te6edf3jsonTff7b72=Tb4b4b4{Ta5d6ff"Ta5d6ffpasswordTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffsecretpassTa5d6ff"Tb4b4b4}Tb4b4b4,

Te6edf3headersTff7b72=Te6edf3headersTb4b4b4,

Tb4b4b4)

Tff7b72assert Te6edf3responseTff7b72.Td2a8ffstatus Tff7b72== T79c0ff400

Te6edf3body Tff7b72= Tff7b72await Te6edf3responseTff7b72.Td2a8ffjsonTb4b4b4(Tb4b4b4)

Tff7b72assert Te6edf3bodyTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffcodeTa5d6ff"Tb4b4b4) Tff7b72== Te6edf3ALTCHA_INVALID_CODE

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_altcha_challenge_endpointTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffaltcha_enabled Tff7b72= Tff7b72True

Te6edf3mock_appTff7b72.Td2a8ffcurrent_contextTff7b72.Td2a8ffrunning Tff7b72= Tff7b72True

Te6edf3env Tff7b72= Tb4b4b4{

Ta5d6ff"Ta5d6ffMESHCHAT_ALTCHA_ENABLEDTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ff1Ta5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffMESHCHAT_ALTCHA_HMAC_KEYTa5d6ff"Tb4b4b4: Te6edf3_TEST_SECRETTb4b4b4,

Tb4b4b4}

Te6edf3aio_app Tff7b72= Te6edf3build_test_aio_appTb4b4b4(Te6edf3mock_appTb4b4b4)

Tff7b72async Tff7b72with Te6edf3TestClientTb4b4b4(Te6edf3TestServerTb4b4b4(Te6edf3aio_appTb4b4b4)Tb4b4b4) Tff7b72as Te6edf3clientTb4b4b4:

Tff7b72with Te6edf3patchTff7b72.Td2a8ffdictTb4b4b4(Te6edf3osTff7b72.Td2a8ffenvironTb4b4b4, Te6edf3envTb4b4b4, Te6edf3clearTff7b72=Tff7b72FalseTb4b4b4)Tb4b4b4:

Te6edf3response Tff7b72= Tff7b72await Te6edf3clientTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ff/api/v1/auth/altcha/challengeTa5d6ff"Tb4b4b4)

Tff7b72assert Te6edf3responseTff7b72.Td2a8ffstatus Tff7b72== T79c0ff200

Te6edf3data Tff7b72= Tff7b72await Te6edf3responseTff7b72.Td2a8ffjsonTb4b4b4(Tb4b4b4)

Tff7b72assert Ta5d6ff"Ta5d6ffparametersTa5d6ff" Tff7b72in Te6edf3data

Tff7b72assert Ta5d6ff"Ta5d6ffsignatureTa5d6ff" Tff7b72in Te6edf3data

Tff7b72assert Te6edf3dataTb4b4b4[Ta5d6ff"Ta5d6ffparametersTa5d6ff"Tb4b4b4]Tff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffalgorithmTa5d6ff"Tb4b4b4) Tff7b72== Ta5d6ff"Ta5d6ffPBKDF2/SHA-256Ta5d6ff"