firebase-ios-sdk/FirebaseAuth/Tests/Unit/AuthWebUtilsTests.swift

// Copyright 2023 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License")
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

import Foundation
import XCTest

@testable import FirebaseAuth

class AuthWebUtilsTests: XCTestCase {
  /** @fn testExtractDomainWithHTTP
   @brief Test case for extracting the domain from a URL with "http://" scheme.
   */
  func testExtractDomainWithHTTP() {
    let urlString = "http://www.example.com/path/to/resource"
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "www.example.com")
  }

  /** @fn testExtractDomainWithHTTPS
   @brief Test case for extracting the domain from a URL with "https://" scheme.
   */
  func testExtractDomainWithHTTPS() {
    let urlString = "https://www.example.com/path/to/resource/"
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "www.example.com")
  }

  /** @fn testExtractDomainWithoutScheme
   @brief Test case for extracting the domain from a URL without a scheme (assumes HTTP by default).
   */
  func testExtractDomainWithoutScheme() {
    let urlString = "www.example.com/path/to/resource"
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "www.example.com")
  }

  /** @fn testExtractDomainWithTrailingSlashes
   @brief Test case for extracting the domain from a URL with trailing slashes.
   */
  func testExtractDomainWithTrailingSlashes() {
    let urlString = "http://www.example.com//////"
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "www.example.com")
  }

  /** @fn testExtractDomainWithStringDomain
   @brief Test case for extracting the domain from a string that represents just the domain itself.
   */
  func testExtractDomainWithStringDomain() {
    let urlString = "example.com"
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "example.com")
  }

  /** @fn testExtractDomainWithWhitespace
   @brief Test case for extracting the domain from a URL with leading/trailing whitespace.
   */
  func testExtractDomainWithWhitespace() {
    let urlString = "   https://www.example.com/path   "
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "www.example.com")
  }

  /** @fn testExtractDomainWithPathTraversal
   @brief Test case for extracting the domain from a URL attempting path traversal.
   */
  func testExtractDomainWithPathTraversal() {
    let urlString = "https://evil.com/../trusted.com"
    let domain = AuthWebUtils.extractDomain(urlString: urlString)
    XCTAssertEqual(domain, "evil.com")
  }

  /** @fn testRandomStringLength
   @brief Test case for verifying the length of random strings.
   */
  func testRandomStringLength() {
    let first = AuthWebUtils.randomString(withLength: 43)
    let second = AuthWebUtils.randomString(withLength: 43)
    XCTAssertEqual(first.count, 43)
    XCTAssertEqual(second.count, 43)
  }

  /** @fn testRandomStringRandomness
   @brief Test case for verifying that consecutive calls produce different strings.
   */
  func testRandomStringRandomness() {
    let first = AuthWebUtils.randomString(withLength: 43)
    let second = AuthWebUtils.randomString(withLength: 43)
    XCTAssertNotEqual(first, second)
  }

  /** @fn testRandomStringCharacterSet
   @brief Test case for verifying the allowed character set of random strings.
   */
  func testRandomStringCharacterSet() {
    let allowed = CharacterSet(
      charactersIn: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"
    )
    let first = AuthWebUtils.randomString(withLength: 43)
    XCTAssertTrue(first.unicodeScalars.allSatisfy { allowed.contains($0) })
  }

  /** @fn testRandomStringEdgeCaseLengths
   @brief Test case for verifying behavior with edge case lengths (e.g., zero or negative).
   */
  func testRandomStringEdgeCaseLengths() {
    XCTAssertEqual(AuthWebUtils.randomString(withLength: 0), "")
    XCTAssertEqual(AuthWebUtils.randomString(withLength: -1), "")
  }
}