From 136920404def25a8fbfae7d6529a3fc54c8acc91 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gr=C3=A9gory=20Soutad=C3=A9?= <soutade@gmail.com>
Date: Mon, 17 Apr 2017 20:37:26 +0200
Subject: [PATCH] Add (QUnit) server tests

---
 server/tests/test.js                      | 201 ++++++++++++++++++++++
 server/tests/tests.html                   |  17 ++
 server/tests/users/test-v7/gpass.bdd      | Bin 0 -> 16384 bytes
 server/tests/users/test-v7/gpass.bdd.init | Bin 0 -> 16384 bytes
 server/tests/users/test-v7/index.php      |  23 +++
 5 files changed, 241 insertions(+)
 create mode 100644 server/tests/test.js
 create mode 100644 server/tests/tests.html
 create mode 100644 server/tests/users/test-v7/gpass.bdd
 create mode 100644 server/tests/users/test-v7/gpass.bdd.init
 create mode 100644 server/tests/users/test-v7/index.php

diff --git a/server/tests/test.js b/server/tests/test.js
new file mode 100644
index 0000000..05e5719
--- /dev/null
+++ b/server/tests/test.js
@@ -0,0 +1,201 @@
+server_url = "https://gpass.soutade.fr";
+current_user = "test-v7";
+pbkdf2_level = 1000;
+CRYPTO_V1_COMPATIBLE = 1;
+use_shadow_logins = false;
+
+/*
+  Must contains :
+  URL        login      password           masterkey
+  -----------------------------------------------------------------
+v7 format
+  test       test       test               test
+  test2      test2      test2              test2 (+shadow login)
+  test16     test16     testtesttesttest   test16
+  test17     test17     testtesttesttestt  test17
+v8 format
+  testv8     testv8     testv8             testv8
+  testv8_2   testv8_2   testv8_2           testv8_2 (+shadow login)
+  testv8_16  testv8_16  testtesttesttest   testv8_16
+  testv8_17  testv8_17  testtesttesttestt  testv8_17
+
+  We assume shadow logins are enabled in server side
+*/
+
+function alert(a) {}
+function nb_unciphered_passwords(passwords)
+{
+    var nb_unciphered = 0;
+    for(i=0;i<passwords.length; i++)
+    {
+	if (passwords[i].unciphered)
+	    nb_unciphered++;
+    }
+    return nb_unciphered;
+}
+
+function find_password(passwords, login)
+{
+    for(i=0; i<passwords.length; i++)
+    {
+	if (passwords[i].clear_login == login)
+	    return passwords[i];
+    }
+    return null;
+}
+
+async function decrypt_passwords(passwords, masterkey)
+{
+    var nb_unciphered = 0;
+
+    for(nb_unciphered = 0, i=0;i<passwords.length; i++)
+    {
+	res = await passwords[i].decrypt(current_mkey);
+	if (res == true)
+	    nb_unciphered++;
+    }
+
+    return nb_unciphered;
+}
+
+QUnit.test( "Testbench", async function( assert ) {
+    assert.ok( passwords  == null, "Initial passwords null" );
+    list_all_entries(current_user);
+    assert.ok( passwords  != null, "Retrieved passwords" );
+    assert.equal( passwords.length, 8, "8 passwords retrieved" );
+    var shadow_logins = 0;
+    for(i=0;i<passwords.length; i++)
+	if (passwords[i].shadow_login.length)
+	    shadow_logins++;
+    assert.ok( shadow_logins  == 2, "2 shadow logins" );
+
+    current_mkey = derive_mkey(current_user, "test");
+    var nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal( nb_unciphered, 1, "test #1 decrypted" );
+
+    await get_ciphered_credentials(current_mkey);
+    res = nb_unciphered_passwords(passwords);
+    assert.equal(res, 1, "No more passwords unciphered with shadow logins");
+
+    current_mkey = derive_mkey(current_user, "test2");
+
+    // Get ciphered credentials for "test2"
+    await get_ciphered_credentials(current_mkey);
+    res = nb_unciphered_passwords(passwords);
+
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Shadow logins OK");
+
+    current_mkey = derive_mkey(current_user, "test16");
+
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Test16 OK");
+
+    current_mkey = derive_mkey(current_user, "test17");
+
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Test17 OK");
+
+    // V8
+    current_mkey = derive_mkey(current_user, "testv8");
+
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Testv8 OK");
+
+    current_mkey = derive_mkey(current_user, "testv8_2");
+
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 0, "Testv8_2 without shadow login");
+    
+    await get_ciphered_credentials(current_mkey);
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Testv8_2 OK");
+
+    current_mkey = derive_mkey(current_user, "testv8_16");
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Testv8_16 OK");
+
+    current_mkey = derive_mkey(current_user, "testv8_17");
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Testv8_17 OK");
+    
+    nb_unciphered = nb_unciphered_passwords(passwords);
+    assert.equal(nb_unciphered, 8, "All passwords unciphered");
+
+    password = find_password(passwords, "testv8");
+    var ok = remove_password_server(current_user, passwords[i].ciphered_login,
+				    passwords[i].access_token);
+    assert.equal(ok, true, "Remove OK");
+    alert(passwords[i].ciphered_login);
+    ok = remove_password_server(current_user, passwords[i].ciphered_login,
+				passwords[i].access_token);
+    assert.equal(ok, true, "Double remove OK");
+
+    password = find_password(passwords, "testv8_2");
+    ok = remove_password_server(current_user, passwords[i].ciphered_login,
+				    "");
+    assert.equal(ok, false, "Remove without access token OK");
+    
+    ok = remove_password_server(current_user, passwords[i].ciphered_login,
+				    "AAAAAAAAAAAAAAAA");
+    assert.equal(ok, false, "Remove Bad access token");
+
+
+    res = await construct_pentry(current_user, "testv8_new", "testv8_new", "testv8_new", "testv8_new", true).then(
+	function (pentry) {
+	    if (pentry == null) return false;
+
+	    return add_password_server(current_user, pentry);
+	});
+
+    assert.equal(res, false, "Add without access token OK");
+
+    use_shadow_logins = true;
+    
+    res = await construct_pentry(current_user, "testv8_new", "testv8_new", "testv8_new", "testv8_new", true).then(
+	function (pentry) {
+	    if (pentry == null) return false;
+
+	    return add_password_server(current_user, pentry);
+	});
+
+    assert.equal(res, true, "Add with access token OK");
+    res = add_password_server(current_user, passwords[passwords.length-1]);
+    assert.equal(res, false, "Double add OK");
+
+    res = await construct_pentry(current_user, "testv8_new2", "testv8_new2", "testv8_new2", "testv8_new2", true).then(
+	function (pentry) {
+	    if (pentry == null) return false;
+
+	    pentry.shadow_login = "AAA";
+	    return add_password_server(current_user, pentry);
+	});
+
+    assert.equal(res, false, "Add with truncated shadow login OK");
+
+    password = find_password(passwords, "test16");
+    ok = remove_password_server(current_user, password.ciphered_login,
+				password.access_token);
+    assert.equal(ok, true, "Remove v7");
+
+    password = find_password(passwords, "test16");
+    ok = remove_password_server(current_user, password.ciphered_login,
+				"AAAAAAAAAAAAAAAA");
+    assert.equal(ok, true, "Remove v7 bad access token");
+});
+
+QUnit.test( "Updated database", async function( assert ) {
+    passwords = null;
+    list_all_entries(current_user);
+    assert.ok( passwords  != null, "Passed!" );
+    assert.equal( passwords.length, 7, "7 passwords retrieved" );
+
+    current_mkey = derive_mkey(current_user, "testv8");
+    var nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal( nb_unciphered, 0, "Password removed" );
+
+    current_mkey = derive_mkey(current_user, "testv8_new");
+    await get_ciphered_credentials(current_mkey);
+    nb_unciphered = await decrypt_passwords(passwords, current_user);
+    assert.equal(nb_unciphered, 1, "Password added");
+});
diff --git a/server/tests/tests.html b/server/tests/tests.html
new file mode 100644
index 0000000..8821f7f
--- /dev/null
+++ b/server/tests/tests.html
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width">
+    <title>QUnit Example</title>
+    <link rel="stylesheet" href="https://code.jquery.com/qunit/qunit-2.3.0.css">
+  </head>
+  <body>
+    <div id="qunit"></div>
+    <div id="qunit-fixture"></div>
+    <script src="https://code.jquery.com/qunit/qunit-2.3.0.js"></script>
+    <script src="../resources/misc.js"></script>
+    <script src="../resources/gpass.js"></script>
+    <script src="test.js"></script>
+  </body>
+  </html>
diff --git a/server/tests/users/test-v7/gpass.bdd b/server/tests/users/test-v7/gpass.bdd
new file mode 100644
index 0000000000000000000000000000000000000000..b1223773f1dbc23722aac05b5047b16fb2e0cb61
GIT binary patch
literal 16384
zcmeI0&2C#o6vwY)w{{a8qe@k_UQ{I!MLIKQJ{L%&m4S)|K?q0{3u`{kq!DRcYD3wY
zCqO&^F93VibPwVIShHh^gjjK|OA6hPMTmsZjC_6XosTo;{LcR@?!5Qz-J=DK%k0sE
zuoz?WV$<m~uZ_n|(_H1N$Jc3F<A=Y$cTNZX;eNGw<>&rz^jp*2{Gl0LAAQfa+A4uc
zpc1GADuGI%5~u_!fl8nfs01p3a}qe{_P4HG>nt}GAs$njos{<K-QJ(<9!$muySMI6
z#%<4bj?+)+(fnw3GQRWn!Q_p}{>|}mm@lRwC7REti=zj0I<m98(dln(ZFN3>d1dzS
zVVKWXe{0VfUUh9B&km1H#vknN-+ps<e_IQ=Gk$0P&ff0+z42R<dpF1J;>WW``MD`K
z$MgFk&mK>oUyX8yN5b*q+2mEvsgJXd=&zl4WM^mX^46<co#yBy(`WOKkNL}f8a`Rf
zR`1i5e^ar#bs6-ag*_a8-3->BG^76JSDSj+yzu_UH|tM^znn7>b$KOF2~+}=KqXKK
zR05SiC2&CmmWS*8<zCxNP}Vr-$$A%(5Xo9^gGeCJxTGP)QgRl`S!0v}6|*o7`91g?
z4X<`iONv${2^3_&;xc-#El6H0gEZQOEF{G2jj|{mI*qY-%v9K-6iTRIOQcW;LILfN
zeDtx16oev+A<1lVu~8T)GHC@EN`|B`fQ{BgidsU5DrcKCI*OPinIN1+YnL~!TwVpL
zsa+&(R^%j4%@H#442;5+l3dQ-8J|f+4kecu_$jGGU;+qP3{eo$iIho!55j^GIT#zP
zv!awjsQD{MBN~qye6q|nGO(l=rekkR%*CLxqTQMqYiX4c5m97}Du(6uV6fa<4!JRg
z0vr*CCWNve95_@73>o0a3Iv(Fvd%d6fqi0F?cTAd2m+#@%qajTlxMF|NbZZMqb-mP
zIg=t9p%87509IhpB}m5!a$W#Os*AEV`NF}Ym#Er6s93`}ikwenmfQVjt|}rB!h00H
zpj8+(3F|^^6O|ZLqFiJ_tw{!umO0zRR&~lInFKnpx5fZRMNvsW&ju5_BQpz#il7of
z8_ARs8gQA|!#4G)B-W7A-W%<sB{ES)VY6fd7&0Y5LnVzKHn+}KL$7bJemE&DH^ah7
zZB*n)3!99#f)(O830g|;MeC7JQWc~qDG<k4FiQ;HA71J&hpi#wG-bzXM-vjT&UK;U
zKzqyFkd-7^GoZ2rT}lf-CX~pDPnJuFtAVJ<q&1RFS#m9zK%fL_50T&OVXyyGMk<8h
zOF$!&O_s2*@`_a|7Vx~MPD*moOUd<Yqs)?3oLDSO9y}*Nan4vhtoPy=Fc&)~N(PmY
zB?blDVfW9CKt!@!quE$tG_rBfTt%L=XJB3l-Xc3TN*IAfs-<_pBwcdS5X;bMm9=D1
zW)8c=<Se8tz!<K+s0%0Xi}NM%-(9^v`l%TVe{4oyZhkoYb@X8L?dYY=@3^D3N}v*`
z1S)|_pc1GADuGI%5~u_!f&Vmt>)pN1S)cbC)LZU#F8X9<@N}08K2+(icDd-2zx7FP
zIqaPGwBu5noU=|cdhMjMP9eJOq_a)|udq<BpC#5IPw0$(Z}?YRB~S@e0+m1|Pzh85
Zl|Us>2~+}=KqXKK{O<_#I^E7-?GKU?G_?Q#

literal 0
HcmV?d00001

diff --git a/server/tests/users/test-v7/gpass.bdd.init b/server/tests/users/test-v7/gpass.bdd.init
new file mode 100644
index 0000000000000000000000000000000000000000..b1223773f1dbc23722aac05b5047b16fb2e0cb61
GIT binary patch
literal 16384
zcmeI0&2C#o6vwY)w{{a8qe@k_UQ{I!MLIKQJ{L%&m4S)|K?q0{3u`{kq!DRcYD3wY
zCqO&^F93VibPwVIShHh^gjjK|OA6hPMTmsZjC_6XosTo;{LcR@?!5Qz-J=DK%k0sE
zuoz?WV$<m~uZ_n|(_H1N$Jc3F<A=Y$cTNZX;eNGw<>&rz^jp*2{Gl0LAAQfa+A4uc
zpc1GADuGI%5~u_!fl8nfs01p3a}qe{_P4HG>nt}GAs$njos{<K-QJ(<9!$muySMI6
z#%<4bj?+)+(fnw3GQRWn!Q_p}{>|}mm@lRwC7REti=zj0I<m98(dln(ZFN3>d1dzS
zVVKWXe{0VfUUh9B&km1H#vknN-+ps<e_IQ=Gk$0P&ff0+z42R<dpF1J;>WW``MD`K
z$MgFk&mK>oUyX8yN5b*q+2mEvsgJXd=&zl4WM^mX^46<co#yBy(`WOKkNL}f8a`Rf
zR`1i5e^ar#bs6-ag*_a8-3->BG^76JSDSj+yzu_UH|tM^znn7>b$KOF2~+}=KqXKK
zR05SiC2&CmmWS*8<zCxNP}Vr-$$A%(5Xo9^gGeCJxTGP)QgRl`S!0v}6|*o7`91g?
z4X<`iONv${2^3_&;xc-#El6H0gEZQOEF{G2jj|{mI*qY-%v9K-6iTRIOQcW;LILfN
zeDtx16oev+A<1lVu~8T)GHC@EN`|B`fQ{BgidsU5DrcKCI*OPinIN1+YnL~!TwVpL
zsa+&(R^%j4%@H#442;5+l3dQ-8J|f+4kecu_$jGGU;+qP3{eo$iIho!55j^GIT#zP
zv!awjsQD{MBN~qye6q|nGO(l=rekkR%*CLxqTQMqYiX4c5m97}Du(6uV6fa<4!JRg
z0vr*CCWNve95_@73>o0a3Iv(Fvd%d6fqi0F?cTAd2m+#@%qajTlxMF|NbZZMqb-mP
zIg=t9p%87509IhpB}m5!a$W#Os*AEV`NF}Ym#Er6s93`}ikwenmfQVjt|}rB!h00H
zpj8+(3F|^^6O|ZLqFiJ_tw{!umO0zRR&~lInFKnpx5fZRMNvsW&ju5_BQpz#il7of
z8_ARs8gQA|!#4G)B-W7A-W%<sB{ES)VY6fd7&0Y5LnVzKHn+}KL$7bJemE&DH^ah7
zZB*n)3!99#f)(O830g|;MeC7JQWc~qDG<k4FiQ;HA71J&hpi#wG-bzXM-vjT&UK;U
zKzqyFkd-7^GoZ2rT}lf-CX~pDPnJuFtAVJ<q&1RFS#m9zK%fL_50T&OVXyyGMk<8h
zOF$!&O_s2*@`_a|7Vx~MPD*moOUd<Yqs)?3oLDSO9y}*Nan4vhtoPy=Fc&)~N(PmY
zB?blDVfW9CKt!@!quE$tG_rBfTt%L=XJB3l-Xc3TN*IAfs-<_pBwcdS5X;bMm9=D1
zW)8c=<Se8tz!<K+s0%0Xi}NM%-(9^v`l%TVe{4oyZhkoYb@X8L?dYY=@3^D3N}v*`
z1S)|_pc1GADuGI%5~u_!f&Vmt>)pN1S)cbC)LZU#F8X9<@N}08K2+(icDd-2zx7FP
zIqaPGwBu5noU=|cdhMjMP9eJOq_a)|udq<BpC#5IPw0$(Z}?YRB~S@e0+m1|Pzh85
Zl|Us>2~+}=KqXKK{O<_#I^E7-?GKU?G_?Q#

literal 0
HcmV?d00001

diff --git a/server/tests/users/test-v7/index.php b/server/tests/users/test-v7/index.php
new file mode 100644
index 0000000..3f09c8a
--- /dev/null
+++ b/server/tests/users/test-v7/index.php
@@ -0,0 +1,23 @@
+<?php
+/*
+  Copyright (C) 2013 Grégory Soutadé
+  
+  This file is part of gPass.
+  
+  gPass is free software: you can redistribute it and/or modify
+  it under the terms of the GNU General Public License as published by
+  the Free Software Foundation, either version 3 of the License, or
+  (at your option) any later version.
+  
+  gPass is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+  
+  You should have received a copy of the GNU General Public License
+  along with gPass.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+include "../../_user";
+
+?>
\ No newline at end of file