1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using NUnit.Framework;
namespace TwoStepsAuthenticator.UnitTests
{
[TestFixture]
public class TimeAuthenticatorTests
{
private MockUsedCodesManager mockUsedCodesManager { get; set; }
[SetUp]
public void SetUp()
{
this.mockUsedCodesManager = new MockUsedCodesManager();
}
[Test]
public void CreateKey()
{
var authenticator = new TimeAuthenticator(mockUsedCodesManager);
var secret = Authenticator.GenerateKey();
var code = authenticator.GetCode(secret);
Assert.IsTrue(authenticator.CheckCode(secret, code, "dummyuser"), "Generated Code doesn't verify");
}
[Test]
public void UsesUsedCodesManager()
{
var date = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc);
var authenticator = new TimeAuthenticator(mockUsedCodesManager, () => date);
var secret = Authenticator.GenerateKey();
var code = authenticator.GetCode(secret);
authenticator.CheckCode(secret, code, "dummyuser");
Assert.AreEqual(mockUsedCodesManager.LastChallenge, 0uL);
Assert.AreEqual(mockUsedCodesManager.LastCode, code);
}
[Test]
public void PreventCodeReuse() {
var date = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc);
var usedCodesManager = new UsedCodesManager();
var authenticator = new TimeAuthenticator(usedCodesManager, () => date);
var secret = Authenticator.GenerateKey();
var code = authenticator.GetCode(secret);
Assert.IsTrue(authenticator.CheckCode(secret, code, "dummyuser"));
Assert.IsTrue(authenticator.CheckCode(secret, code, "otheruser"));
Assert.IsFalse(authenticator.CheckCode(secret, code, "dummyuser"));
}
// Test Vectors from http://tools.ietf.org/html/rfc6238#appendix-B have all length 8. We want a length of 6.
// This Test Vectors are from a Ruby implementation. They work with the Google Authentificator app.
[TestCase("DRMK64PPMMC7TDZF", "2013-12-04 18:33:01 +0100", "661188")]
[TestCase("EQOGSM3XZUH6SE2Y", "2013-12-04 18:34:56 +0100", "256804")]
[TestCase("4VU7EQACVDMFJSBG", "2013-12-04 18:36:16 +0100", "800872")]
public void VerifyKeys(string secret, string timeString, string code)
{
var date = DateTime.Parse(timeString);
var authenticator = new TimeAuthenticator(mockUsedCodesManager, () => date);
Assert.IsTrue(authenticator.CheckCode(secret, code));
}
[Test]
public void VerifyUsedTime()
{
var date = DateTime.Parse("2013-12-05 17:23:50 +0100");
var authenticator = new TimeAuthenticator(mockUsedCodesManager, () => date);
DateTime usedTime;
Assert.True(authenticator.CheckCode("H22Q7WAMQYFZOJ2Q", "696227", null, out usedTime));
// 17:23:50 - 30s
var sameDate = date.AddSeconds(-30);
Assert.AreEqual(usedTime.Hour, sameDate.Hour);
Assert.AreEqual(usedTime.Minute, sameDate.Minute);
Assert.AreEqual(usedTime.Second, sameDate.Second);
}
}
}
|
