mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-09-30 19:21:33 +02:00
Sn0rrii
ba1c97c808
feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)
50 lines
1.5 KiB
Python
50 lines
1.5 KiB
Python
"""Unit tests for 2FA helper functions in mfa.py."""
|
|
|
|
import base64
|
|
import string
|
|
|
|
import pytest
|
|
from passlib.context import CryptContext
|
|
|
|
from backend.app.api.routes.mfa import _generate_backup_codes, _generate_totp_qr_b64
|
|
|
|
|
|
class TestBackupCodeGeneration:
|
|
"""Tests for backup code helpers."""
|
|
|
|
def test_generates_ten_codes(self):
|
|
plain, hashed = _generate_backup_codes()
|
|
assert len(plain) == 10
|
|
assert len(hashed) == 10
|
|
|
|
def test_codes_are_eight_chars(self):
|
|
plain, _ = _generate_backup_codes()
|
|
for code in plain:
|
|
assert len(code) == 8
|
|
|
|
def test_codes_are_alphanumeric(self):
|
|
allowed = set(string.ascii_uppercase + string.digits)
|
|
plain, _ = _generate_backup_codes()
|
|
for code in plain:
|
|
assert all(c in allowed for c in code)
|
|
|
|
def test_hashes_verify_against_plain(self):
|
|
ctx = CryptContext(schemes=["pbkdf2_sha256"], deprecated="auto")
|
|
plain, hashed = _generate_backup_codes()
|
|
for p, h in zip(plain, hashed, strict=True):
|
|
assert ctx.verify(p, h)
|
|
|
|
def test_codes_are_unique(self):
|
|
plain, _ = _generate_backup_codes()
|
|
assert len(set(plain)) == 10
|
|
|
|
|
|
class TestTOTPQRCode:
|
|
"""Tests for QR code generation helper."""
|
|
|
|
def test_generates_base64_png(self):
|
|
uri = "otpauth://totp/Bambuddy:testuser?secret=BASE32SECRET&issuer=Bambuddy"
|
|
result = _generate_totp_qr_b64(uri)
|
|
decoded = base64.b64decode(result)
|
|
assert decoded[:4] == b"\x89PNG"
|