diff options
| -rw-r--r-- | src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj | 1 | ||||
| -rw-r--r-- | src/DotNetOpenAuth.Test/OpenId/RelyingParty/PositiveAuthenticationResponseTests.cs | 67 |
2 files changed, 68 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj b/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj index 181cea3..8fe91d0 100644 --- a/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj +++ b/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj @@ -133,6 +133,7 @@ <Compile Include="OpenId\OpenIdTestBase.cs" /> <Compile Include="OpenId\RealmTests.cs" /> <Compile Include="OpenId\RelyingParty\AuthenticationRequestTests.cs" /> + <Compile Include="OpenId\RelyingParty\PositiveAuthenticationResponseTests.cs" /> <Compile Include="OpenId\RelyingParty\OpenIdRelyingPartyTests.cs" /> <Compile Include="OpenId\RelyingParty\RelyingPartySecuritySettingsTests.cs" /> <Compile Include="OpenId\RelyingParty\ServiceEndpointTests.cs" /> diff --git a/src/DotNetOpenAuth.Test/OpenId/RelyingParty/PositiveAuthenticationResponseTests.cs b/src/DotNetOpenAuth.Test/OpenId/RelyingParty/PositiveAuthenticationResponseTests.cs new file mode 100644 index 0000000..f849a7d --- /dev/null +++ b/src/DotNetOpenAuth.Test/OpenId/RelyingParty/PositiveAuthenticationResponseTests.cs @@ -0,0 +1,67 @@ +//-----------------------------------------------------------------------
+// <copyright file="PositiveAuthenticationResponseTests.cs" company="Andrew Arnott">
+// Copyright (c) Andrew Arnott. All rights reserved.
+// </copyright>
+//-----------------------------------------------------------------------
+
+namespace DotNetOpenAuth.Test.OpenId.RelyingParty {
+ using System;
+ using System.Collections.Generic;
+ using System.Linq;
+ using System.Text;
+ using DotNetOpenAuth.OpenId;
+ using DotNetOpenAuth.OpenId.Messages;
+ using DotNetOpenAuth.OpenId.RelyingParty;
+ using Microsoft.VisualStudio.TestTools.UnitTesting;
+ using DotNetOpenAuth.OpenId.Provider;
+ using RPAuthRequest = DotNetOpenAuth.OpenId.RelyingParty.IAuthenticationRequest;
+ using OPAuthRequest = DotNetOpenAuth.OpenId.Provider.IAuthenticationRequest;
+ using DotNetOpenAuth.Messaging;
+ using DotNetOpenAuth.Test.Mocks;
+
+ [TestClass]
+ public class PositiveAuthenticationResponseTests : OpenIdTestBase {
+ private readonly Realm realm = new Realm(TestSupport.GetFullUrl(TestSupport.ConsumerPage).AbsoluteUri);
+ private readonly Uri returnTo = TestSupport.GetFullUrl(TestSupport.ConsumerPage);
+
+ [TestInitialize]
+ public override void SetUp() {
+ base.SetUp();
+ }
+
+ /// <summary>
+ /// Verifies good, positive assertions are accepted.
+ /// </summary>
+ [TestMethod]
+ public void Valid() {
+ PositiveAssertionResponse assertion = GetPositiveAssertion();
+ var rp = CreateRelyingParty();
+ var authResponse = new PositiveAuthenticationResponse(assertion, rp);
+ Assert.AreEqual(AuthenticationStatus.Authenticated, authResponse.Status);
+ }
+
+ /// <summary>
+ /// Verifies that the RP rejects signed solicited assertions by an OP that
+ /// makes up a claimed Id that was not part of the original request, and
+ /// that the OP has no authority to assert positively regarding.
+ /// </summary>
+ [TestMethod, ExpectedException(typeof(ProtocolException))]
+ public void SpoofedClaimedIdDetectionSolicited() {
+ PositiveAssertionResponse assertion = GetPositiveAssertion();
+ assertion.ProviderEndpoint = new Uri("http://rogueOP");
+ var rp = CreateRelyingParty();
+ var authResponse = new PositiveAuthenticationResponse(assertion, rp);
+ Assert.AreEqual(AuthenticationStatus.Failed, authResponse.Status);
+ }
+
+ private PositiveAssertionResponse GetPositiveAssertion() {
+ Protocol protocol = Protocol.Default;
+ PositiveAssertionResponse assertion = new PositiveAssertionResponse(protocol.Version, returnTo);
+ assertion.ClaimedIdentifier = TestSupport.GetMockIdentifier(TestSupport.Scenarios.AutoApproval, this.MockResponder, protocol.ProtocolVersion);
+ assertion.LocalIdentifier = TestSupport.GetDelegateUrl(TestSupport.Scenarios.AutoApproval);
+ assertion.ReturnTo = returnTo;
+ assertion.ProviderEndpoint = TestSupport.GetFullUrl("/" + TestSupport.ProviderPage, null, false);
+ return assertion;
+ }
+ }
+}
|