blockstack-auth/lib/test/unitTests.js

Blockstack Auth Library

'use strict';

var _typeof = typeof Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };

var _tape = require('tape');

var _tape2 = _interopRequireDefault(_tape);

var _index = require('../index');

var _onenameApi = require('onename-api');

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

var onenameResolver = new _onenameApi.OnenameClient(process.env.ONENAME_APP_ID, process.env.ONENAME_APP_SECRET);

function testBlockstackResolver(blockstackIDs, resolve, reject) {
    if (blockstackIDs[0] === 'todo.app') {
        resolve({
            "todo.app": {
                "profile": {
                    "auth": [{
                        "publicKey": "027d28f9951ce46538951e3697c62588a87f1f1f295de4a14fdd4c780fc52cfe69"
                    }]
                }
            }
        });
    } else if (blockstackIDs[0] === 'ryan.id') {
        resolve({
            "ryan.id": {
                "profile": {
                    "auth": [{
                        "publicKeychain": "xpub661MyMwAqRbcFQVrQr4Q4kPjaP4JjWaf39fBVKjPdK6oGBayE46GAmKzo5UDPQdLSM9DufZiP8eauy56XNuHicBySvZp7J5wsyQVpi2axzZ"
                    }]
                }
            }
        });
    } else {
        resolve(null);
    }
}

function testAuthRequest() {
    var privateKey = 'a5c61c6ca7b3e7e55edee68566aeab22e4da26baa285c7bd10e8d2218aa3b229';
    var publicKey = '027d28f9951ce46538951e3697c62588a87f1f1f295de4a14fdd4c780fc52cfe69';

    var sampleToken = 'eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3N1ZWRBdCI6IjE0NDA3MTM0MTQuMTkiLCJjaGFsbGVuZ2UiOiIxZDc4NTBkNy01YmNmLTQ3ZDAtYTgxYy1jMDA4NTc5NzY1NDQiLCJwZXJtaXNzaW9ucyI6WyJibG9ja2NoYWluaWQiXSwiaXNzdWVyIjp7InB1YmxpY0tleSI6IjAzODI3YjZhMzRjZWJlZTZkYjEwZDEzNzg3ODQ2ZGVlYWMxMDIzYWNiODNhN2I4NjZlMTkyZmEzNmI5MTkwNjNlNCIsImRvbWFpbiI6Im9uZW5hbWUuY29tIn19.96Q_O_4DX8uPy1enosEwS2sIcyVelWhxvfj2F8rOvHldhqt9YRYilauepb95DVnmpqpCXxJb7jurT8auNCbptw';
    var sampleTokenPayload = { "issuedAt": "1440713414.19", "challenge": "1d7850d7-5bcf-47d0-a81c-c00857976544", "permissions": ["blockchainid"], "issuer": { "publicKey": "03827b6a34cebee6db10d13787846deeac1023acb83a7b866e192fa36b919063e4", "domain": "onename.com" } };

    (0, _tape2.default)('basicRequest', function (t) {
        t.plan(4);

        var issuingBlockchainID = 'todo.app';

        var authRequest = new _index.AuthRequest(privateKey);

        authRequest.setIssuer({
            username: issuingBlockchainID
        });

        var authRequestToken = authRequest.sign();
        var decodedAuthRequestToken = (0, _index.decodeToken)(authRequestToken);

        t.ok(authRequest instanceof _index.AuthRequest, 'authRequest should be a valid AuthMessage object');
        t.equal(typeof authRequestToken === 'undefined' ? 'undefined' : _typeof(authRequestToken), 'string', 'token should be a string');
        t.equal(decodedAuthRequestToken.payload.issuer.username, issuingBlockchainID, 'token blockchain id should match the reference');

        (0, _index.verifyAuthMessage)(authRequestToken, testBlockstackResolver, function (verified) {
            t.equal(verified, true, 'token should be verified');
        }, function (err) {
            console.log(err);
        });
    });

    (0, _tape2.default)('unsignedRequest', function (t) {
        t.plan(2);

        var unsignedRequestToken = (0, _index.createUnsignedRequest)({ 'app': 'unknown' });
        t.ok(unsignedRequestToken);
        console.log(unsignedRequestToken);

        var decodedRequestToken = (0, _index.decodeToken)(unsignedRequestToken);
        t.ok(decodedRequestToken);
        console.log(decodedRequestToken);
    });

    (0, _tape2.default)('advancedRequest', function (t) {
        t.plan(4);

        var issuingBlockchainID = 'todo.app';

        var authRequest = new _index.AuthRequest(privateKey);

        authRequest.setIssuer({
            username: issuingBlockchainID,
            appName: 'Todo App',
            appDomain: 'todo.app'
        });
        authRequest.setProvisions([{ action: 'disclose', scope: 'username' }, { action: 'write', data: { uuid: '34e57db64ce7435ab0f759oca31386527c670bd1' } }]);

        var authRequestToken = authRequest.sign();
        var decodedAuthRequestToken = (0, _index.decodeToken)(authRequestToken);

        console.log(authRequestToken);
        console.log(JSON.stringify(decodedAuthRequestToken, null, 2));

        t.ok(authRequest instanceof _index.AuthRequest, 'authRequest should be a valid AuthMessage object');
        t.equal(typeof authRequestToken === 'undefined' ? 'undefined' : _typeof(authRequestToken), 'string', 'token should be a string');
        t.equal(decodedAuthRequestToken.payload.issuer.username, issuingBlockchainID, 'token blockchain id should match the reference');

        (0, _index.verifyAuthMessage)(authRequestToken, testBlockstackResolver, function (verified) {
            t.equal(verified, true, 'token should be verified');
        }, function (err) {
            console.log(err);
        });
    });

    (0, _tape2.default)('requestDecoding', function (t) {
        t.plan(1);

        var decodedSampleToken = (0, _index.decodeToken)(sampleToken);
        t.equal(JSON.stringify(decodedSampleToken.payload), JSON.stringify(sampleTokenPayload), 'token payload should match the reference payload');
    });
}

function testAuthResponse() {
    var privateKeyHex = '278a5de700e29faae8e40e366ec5012b5ec63d36ec77e8a2417154cc1d25383f',
        publicKeyHex = '03fdd57adec3d438ea237fe46b33ee1e016eda6b585c3e27ea66686c2ea5358479',
        publicKeychain = 'xpub661MyMwAqRbcFQVrQr4Q4kPjaP4JjWaf39fBVKjPdK6oGBayE46GAmKzo5UDPQdLSM9DufZiP8eauy56XNuHicBySvZp7J5wsyQVpi2axzZ',
        privateKeychain = 'xprv9s21ZrQH143K2vRPJpXPhcT12MDpL3rofvjagwKn4yZpPPFpgWn1cy1Wwp3pk78wfHSLcdyZhmEBQsZ29ZwFyTQhhkVVa9QgdTC7hGMB1br',
        chainPath = 'bd62885ec3f0e3838043115f4ce25eedd22cc86711803fb0c19601eeef185e39',
        provisions = [{ action: 'sign', data: '7cd9ed5e-bb0e-49ea-a323-f28bde3a0549' }, { action: 'disclose', scope: 'username' }],
        challengeSignature = "3045022100963da1185591472e1bc867319ddd372593e17758724aaae49a2a30284b399bf0022037022ba279cf20421b96e9cac2a16ab6e415878cda488bc429fbc325f04315af",
        username = 'ryan.id',
        sampleToken = 'eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.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.oO7ROPKq3T3X0azAXzHsf6ub6CYy5nUUFDoy8MS22B3TlYisqsBrRtzWIQcSYiFXLytrXwAdt6vjehj3OFioDQ',
        sampleTokenPayload = { "issuedAt": "1440713414.85", "challenge": "7cd9ed5e-bb0e-49ea-a323-f28bde3a0549", "issuer": { "publicKey": "03fdd57adec3d438ea237fe46b33ee1e016eda6b585c3e27ea66686c2ea5358479", "chainPath": "bd62885ec3f0e3838043115f4ce25eedd22cc86711803fb0c19601eeef185e39", "publicKeychain": "xpub661MyMwAqRbcFQVrQr4Q4kPjaP4JjWaf39fBVKjPdK6oGBayE46GAmKzo5UDPQdLSM9DufZiP8eauy56XNuHicBySvZp7J5wsyQVpi2axzZ", "blockchainid": "ryan" } },
        partiallyIdentifiedToken = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eyJpc3N1ZXIiOnsicHVibGljS2V5IjoiMDNmZGQ1N2FkZWMzZDQzOGVhMjM3ZmU0NmIzM2VlMWUwMTZlZGE2YjU4NWMzZTI3ZWE2NjY4NmMyZWE1MzU4NDc5IiwiYmxvY2tjaGFpbmlkIjoicnlhbiIsInB1YmxpY0tleWNoYWluIjoieHB1YjY2MU15TXdBcVJiY0ZRVnJRcjRRNGtQamFQNEpqV2FmMzlmQlZLalBkSzZvR0JheUU0NkdBbUt6bzVVRFBRZExTTTlEdWZaaVA4ZWF1eTU2WE51SGljQnlTdlpwN0o1d3N5UVZwaTJheHpaIn0sImlzc3VlZEF0IjoxNDQxNzU1NjE5MDk2LCJjaGFsbGVuZ2UiOiI3Y2Q5ZWQ1ZS1iYjBlLTQ5ZWEtYTMyMy1mMjhiZGUzYTA1NDkiLCJpYXQiOjE0NDE3NTU2MTl9.1LxW_yg2z40Qd84x0kep0-7TWiDdTEoJbdYFUJ3qt297zxbwo8OOvYW43W6TMT5cloxur5wifq0WoOTdXw4C_Q',
        invalidUsername = 'ryanshea.id',
        privateData = {};

    (0, _tape2.default)('basicResponse', function (t) {
        t.plan(5);

        var authResponse = new _index.AuthResponse(privateKeyHex);

        authResponse.satisfyProvisions(provisions, username, privateData);
        authResponse.setIssuer(username, publicKeychain, chainPath);

        var authResponseToken = authResponse.sign();
        var decodedAuthResponseToken = (0, _index.decodeToken)(authResponseToken);

        console.log(JSON.stringify(decodedAuthResponseToken, null, 2));

        t.ok(authResponse instanceof _index.AuthResponse, 'authRequest should be a valid AuthResponse object');
        t.equal(typeof authResponseToken === 'undefined' ? 'undefined' : _typeof(authResponseToken), 'string', 'token should be a string');
        t.equal(decodedAuthResponseToken.payload.issuer.publicKey, publicKeyHex, 'token public key hex should match the reference value');
        t.equal(decodedAuthResponseToken.payload.provisions[0].signature, challengeSignature, 'challenge signature should match the reference value');

        (0, _index.verifyAuthMessage)(authResponseToken, testBlockstackResolver, function (verified) {
            t.equal(verified, true, 'token should be verified');
        }, function (err) {
            console.log(err);
        });
    });

    (0, _tape2.default)('partiallyIdentifiedResponse', function (t) {
        t.plan(1);

        (0, _index.verifyAuthMessage)(partiallyIdentifiedToken, testBlockstackResolver, function (verified) {
            t.equal(verified, false, 'token should be invalid');
        }, function (err) {
            console.log(err);
        });
    });

    (0, _tape2.default)('responseWithIncorrectBlockchainID', function (t) {
        t.plan(2);

        var authResponse = new _index.AuthResponse(privateKeyHex, publicKeyHex);

        authResponse.satisfyProvisions(provisions, invalidUsername, privateData);
        authResponse.setIssuer(invalidUsername, publicKeychain, chainPath);

        var authResponseToken = authResponse.sign();
        t.ok(authResponseToken, 'token should have been created');

        (0, _index.verifyAuthMessage)(authResponseToken, testBlockstackResolver, function (verified) {
            t.equal(verified, false, 'token should be invalid');
        }, function (err) {
            console.log(err);
        });
    });

    (0, _tape2.default)('anonymousResponse', function (t) {
        t.plan(4);

        var authResponse = new _index.AuthResponse(privateKeyHex);

        authResponse.satisfyProvisions(provisions);

        var authResponseToken = authResponse.sign();
        var decodedAuthResponseToken = (0, _index.decodeToken)(authResponseToken);

        t.ok(authResponse instanceof _index.AuthResponse, 'authRequest should be a valid AuthResponse object');
        t.equal(typeof authResponseToken === 'undefined' ? 'undefined' : _typeof(authResponseToken), 'string', 'token should be a string');
        t.equal(decodedAuthResponseToken.payload.issuer.publicKey, publicKeyHex, 'token public key hex should match the reference value');

        (0, _index.verifyAuthMessage)(authResponseToken, testBlockstackResolver, function (verified) {
            t.equal(verified, true, 'token should be verified');
        }, function (err) {
            console.log(err);
        });
    });

    (0, _tape2.default)('responseDecoding', function (t) {
        t.plan(1);

        var decodedSampleToken = (0, _index.decodeToken)(sampleToken);
        t.equal(JSON.stringify(decodedSampleToken.payload), JSON.stringify(sampleTokenPayload), 'token payload should match the reference payload');
    });
}

testAuthRequest();
testAuthResponse();