@fort-major/msq/test/protected.test.ts

Privacy-focused MetaMask snap for the Internet Computer (ICP)

import { installSnap } from "@metamask/snaps-jest";
import { ok } from "./utils";
import {
  IIdentityAddRequest,
  IIdentityGetLoginOptionsRequest,
  IIdentityLoginRequest,
  SNAP_METHODS,
  toCBOR,
} from "@fort-major/msq-shared";

describe("Protected methods", () => {
  it("should only be called from MSQ website", async () => {
    const snap = await installSnap();
    const badSite = "https://bad-site.com";

    // attempt to log in
    const req1: IIdentityLoginRequest = {
      toOrigin: "http:site.com",
      withIdentityId: 0,
    };

    const resp1 = await snap.request({
      origin: badSite,
      method: SNAP_METHODS.protected.identity.login,
      params: { body: toCBOR(req1) },
    });

    expect(() => ok(resp1.response)).toThrowError();

    // login
    const req2: IIdentityLoginRequest = {
      toOrigin: badSite,
      withIdentityId: 0,
    };

    const resp2 = await snap.request({
      origin: badSite,
      method: SNAP_METHODS.protected.identity.login,
      params: { body: toCBOR(req2) },
    });

    expect(() => ok(resp2.response)).toThrowError();

    // get login options
    const req3: IIdentityGetLoginOptionsRequest = {
      forOrigin: badSite,
    };

    const resp3 = await snap.request({
      origin: badSite,
      method: SNAP_METHODS.protected.identity.getLoginOptions,
      params: { body: toCBOR(req3) },
    });

    expect(() => ok(resp3.response)).toThrowError();

    // add new mask
    const req4: IIdentityAddRequest = {
      toOrigin: badSite,
    };

    const resp4 = await snap.request({
      origin: badSite,
      method: SNAP_METHODS.protected.identity.add,
      params: { body: toCBOR(req4) },
    });

    expect(() => ok(resp4.response)).toThrowError();
  });
});